SUSE-SU-2020:0845-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcpemu routine while emulating IRC and other protocols bsc1161066. - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation bsc1166379. -...

SUSE-SU-2020:0844-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcpemu routine while emulating IRC and other protocols bsc1161066. - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation bsc1166379. -...

texlive: Buffer overflow in t1_check_unusual_charstring function in writet1.c

An issue was discovered in t1checkunusualcharstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex...

Product update: Virtuozzo 7.0 Update 13 (7.0.13-298)

The Update 13 for Virtuozzo 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.12.1.vz7.131.10. Vulnerability id: PSBM-95072 'pstorage-target' files are left over after successful migrations of VMs on Virtuozzo Storage from...

openSUSE Security Update : opera (openSUSE-2020-402)

This update for opera fixes the following issues : Update to version 67.0.3575.97 - DNA-84063 Open URL in new tab with Go to web address in search/copy popup and right mouse click context menu - DNA-84780 Search in Search and Copy popup opens tab in wrong position from popup window - DNA-84786...

Beijing Ruixin Zhongke Education Technology Co., Ltd. on the existence of logic flaws vulnerability of entrepreneurial live platforms

Headquartered in Beijing, Beijing Ruixin Zhongke Education Technology Co. Ltd. was founded in 2017 as an innovative company in the field of internet education. Beijing Ruixin Zhongke Education Technology Co. Ltd. on entrepreneurial live platform has a logic flaw vulnerability, which can be...

live-wintersport.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126361 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting live-wintersport.com...

Taking Content Protection to the Edge

To protect our industry, we need to protect our content. That's been an ongoing theme in conversations with Akamai's broadcast customers whose streaming offerings have evolved into critical business units. The revenue loss figures in question aren't trivial, nor is the scope of the impact. Global...

WordPress Unauthorized Access Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WP Live Chat Support is a live chat plugin used in it. A security vulnerability exists in WordPress WP Live Chat Support versions prior...

Medium: kernel-livepatch-4.14.165-131.185

Issue Overview: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c.CVE-2020-8648 Affected Packages: kernel-livepatch-4.14.165-131.185 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Medium: kernel-livepatch-4.14.165-133.209

Issue Overview: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c.CVE-2020-8648 Affected Packages: kernel-livepatch-4.14.165-133.209 Issue Correction: Please ensure you have live patching enabled. Run yum update...

CVE-2019-12498

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplcapipermissioncheck protection mechanism...

CVE-2019-12498

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplcapipermissioncheck protection mechanism...

CVE-2019-12498

The CVE-2019-12498 entry affects the WordPress WP Live Chat Support plugin, where versions prior to 8.0.33 allow unauthenticated REST API access because the wplc_api_permission_check protection is not invoked. Public sources (NVD, Red Hat, CVE lists) describe this as an API-authentication bypass ...

CVE-2019-12498

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplcapipermissioncheck protection mechanism...

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center solution allows a attacker to trigger a service failure.

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center system is related to errors in processing incoming Live Data traffic. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

Racer Live Companion installer suffers from dll hijacking vulnerability

Racer Live Companion is a live broadcasting aid based on Racer Open. There is a dll hijacking vulnerability in the installer of Racer Live Companion. Attackers can use the vulnerability to load malicious dll and execute malicious code...

LiveZilla Live Chat Elevation of Privilege Vulnerability

LiveZilla Live Chat is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A security vulnerability exists in the 'name' functi...

CVE-2020-9758

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level...

CVE-2020-9758

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level...