Rocky Linux 8 : gnupg2 (RLSA-2022:6463)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6463 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2023-420)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-420 advisory. An issue was found in libcurl which allows cookies to be inserted into a running program if specific conditions are met. The libcurl provided function, curleasyduphandle, is used to duplicate t...

[SECURITY] Fedora 39 Update: attract-mode-2.7.0-5.fc39

Attract-Mode is a graphical frontend for command line emulators such as MAME, MESS, and Nestopia. It hides the underlying operating system and is intended to be controlled with a joystick, gamepad or spin dial, making it ideal for use in arcade cabinet setups...

[SECURITY] Fedora 39 Update: godot-4.1.2-1.fc39

Godot is an advanced, feature-packed, multi-platform 2D and 3D game engine. It provides a huge set of common tools, so you can just focus on making your game without reinventing the wheel. Godot is completely free and open source under the very permissive MIT license. No strings attached, no...

[SECURITY] Fedora 39 Update: xen-4.17.2-4.fc39

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2023-4768

A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATEID/1613157927228/InvSWMetering.p...

OESA-2023-1789 golang security update

. Security Fixes: The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "!" comment tokens, in script contexts. This may cause the template parser to improperly interpret the contents of script contexts, causing actions to be improperly escaped. This may be...

OESA-2023-1784 traceroute security update

Traceroute tracks the route packets taken from an IP network on their way to a given host. It utilizes the IP protocol's time to live TTL field and attempts to elicit an ICMP TIMEEXCEEDED response from each gateway along the path to the host. Security Fixes: In buc Traceroute 2.0.12 through 2.1.2...

[SECURITY] Fedora 38 Update: godot-4.1.2-1.fc38

Godot is an advanced, feature-packed, multi-platform 2D and 3D game engine. It provides a huge set of common tools, so you can just focus on making your game without reinventing the wheel. Godot is completely free and open source under the very permissive MIT license. No strings attached, no...

[SECURITY] Fedora 37 Update: godot-4.1.2-1.fc37

Godot is an advanced, feature-packed, multi-platform 2D and 3D game engine. It provides a huge set of common tools, so you can just focus on making your game without reinventing the wheel. Godot is completely free and open source under the very permissive MIT license. No strings attached, no...

PT-2023-30562 · Zoho · Manageengine Desktop Central

Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central version 9.1.0 Description: A CRLF injection vulnerability has been found in ManageEngine Desktop Central. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response...

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3 the wrapper scripts do not properly parse command lines.

...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Hattoriya. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Daily-value.Fukueten exists. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.honten. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from a vulnerability in Gyouza-newhushimi. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates from a vulnerability in VISION MEAT WORKS Track Diner 10/10mbl. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from a vulnerability in hirochanKAKIwaiting. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in shouzu sweets oz. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.ekimaemc. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...