Lucene search
+L

1245 matches found

OSV
OSV
added 2020/02/06 5:15 p.m.7 views

CVE-2019-12426

an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...

5.3CVSS6.1AI score0.04889EPSS
SaveExploits0References4
OSV
OSV
added 2020/01/08 8:15 p.m.1 views

DEBIAN-CVE-2019-11757

When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

8.8CVSS8.4AI score0.01336EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/01/08 7:26 p.m.41 views

CVE-2019-11757

When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox 70, Thunderbird 68.2, and Firefox ESR 68.2...

8.8CVSS9.7AI score0.01336EPSS
SaveExploits0
OSV
OSV
added 2019/12/09 11:20 a.m.4 views

OPENSUSE-SU-2019:2654-1 Security update for calamares

This update for calamares fixes the following issues: - Launch with 'pkexec calamares' in openSUSE Tumbleweed, but launch with 'xdg-su -c calamares' in openSUSE Leap 15. Update to Calamares 3.2.15: - 'displaymanager' module now treats 'sysconfig' as a regular entry in the 'displaymanagers' list,...

8.1CVSS8AI score0.01692EPSS
SaveExploits1References4
Oracle linux
Oracle linux
added 2019/11/20 12:0 a.m.57 views

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

6.9AI score
SaveExploits0
Oracle linux
Oracle linux
added 2019/11/14 12:0 a.m.34 views

systemd security, bug fix, and enhancement update

239-18.0.1 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry...

4.4CVSS5.5AI score0.00511EPSS
SaveExploits1
NVD
NVD
added 2019/11/13 8:15 p.m.19 views

CVE-2019-18793

Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter...

6.1CVSS6AI score0.00791EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/09 12:45 p.m.10 views

OPENSUSE-SU-2019:2453-1 Security update for python3

This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed: - Fixed regression of OpenSSL...

7.5CVSS6.7AI score0.05418EPSS
SaveExploits1References8
OPENSUSE Linux
OPENSUSE Linux
added 2019/11/09 12:0 a.m.251 views

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2019:2453-1 Rating: moderate References: 1149121 1149792 1149955 1151490 1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and h...

7.5CVSS7.7AI score0.05418EPSS
SaveExploits1References5
NVD
NVD
added 2019/11/07 7:15 p.m.29 views

CVE-2010-2472

Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...

4.8CVSS5AI score0.00759EPSS
SaveExploits0References3
Prion
Prion
added 2019/11/07 7:15 p.m.21 views

Cross site scripting

Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...

3.5CVSS5.8AI score0.00759EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/07 7:15 p.m.44 views

CVE-2010-2472

Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting XSS attack. This vulnerability is mitigat...

4.8CVSS5.8AI score0.00759EPSS
SaveExploits0References1
CVE
CVE
added 2019/11/07 6:5 p.m.97 views

CVE-2010-2472

CVE-2010-2472 affects Drupal 6.x < 6.16 and 5.x

4.8CVSS5.3AI score0.00759EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2019/11/06 5:13 p.m.4 views

Mozilla: Use-after-free when creating index updates in IndexedDB

A use-after-free flaw was found in Mozilla Firefox and Thunderbird. When following a value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. An attacker could use this flaw to execute code that was stored in the referenced memory or...

8.8CVSS7.5AI score0.01336EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:0 a.m.48 views

openSUSE Security Update : python3 (openSUSE-2019-2438)

This update for python3 to 3.6.9 fixes the following issues : Security issues fixed : - CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed : - Fixed regression of OpenS...

7.5CVSS7.2AI score0.05418EPSS
SaveExploits1References7
OSV
OSV
added 2019/11/05 3:31 p.m.9 views

OPENSUSE-SU-2019:2438-1 Security update for python3

This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed: - Fixed regression of OpenSSL...

7.5CVSS6.7AI score0.05418EPSS
SaveExploits1References8
OPENSUSE Linux
OPENSUSE Linux
added 2019/11/05 12:0 a.m.103 views

Security update for python3 (moderate)

openSUSE Security Update: Security update for python3 Announcement ID: openSUSE-SU-2019:2438-1 Rating: moderate References: 1149121 1149792 1149955 1151490 1153238 Cross-References: CVE-2019-16056 CVE-2019-16935 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and h...

7.5CVSS7.7AI score0.05418EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2019/10/30 12:0 a.m.44 views

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:2802-1)

This update for python3 to 3.6.9 fixes the following issues : Security issues fixed : CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed: Fixed regression of OpenSSL...

7.5CVSS7.2AI score0.05418EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
added 2019/10/29 1:48 p.m.6 views

Mozilla: Use-after-free when creating index updates in IndexedDB

A use-after-free flaw was found in Mozilla Firefox and Thunderbird. When following a value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. An attacker could use this flaw to execute code that was stored in the referenced memory or...

8.8CVSS7.5AI score0.01336EPSS
SaveExploits0References5
OSV
OSV
added 2019/10/29 10:39 a.m.9 views

SUSE-SU-2019:2802-1 Security update for python3

This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. bsc1149955 - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py bsc1153238. Non-security issues fixed: - Fixed regression of OpenSSL...

7.5CVSS6.7AI score0.05418EPSS
SaveExploits1References10
Rows per page
Query Builder