1154 matches found
GHSA-FQ77-7P7R-83RJ Directory Traversal in Next.js
Impact - Not affected: Deployments on ZEIT Now v2 https://zeit.co are not affected - Not affected: Deployments using the serverless target - Not affected: Deployments using next export - Affected: Users of Next.js below 9.3.2 We recommend everyone to upgrade regardless of whether you can reproduc...
BELL-CVE-2020-0551 CVE-2020-0551 does not affect BellSoft software
Bulletin has no description...
CVE-2020-1979
A format string vulnerability in the PAN-OS log daemon logd on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. This issue affect...
Security Bulletin: Privilege escalation in IBM® Db2® tool db2cacpy (CVE-2018-1685).
Summary A vulnerability exists in db2cacpy which could expose sensitive information to user. Vulnerability Details CVEID: CVE-2018-1685 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server contains a vulnerability in db2cacpy that could allow a local user to read any file ...
BELL-CVE-2019-20382 CVE-2019-20382 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2020-8130 CVE-2020-8130 does not affect BellSoft software
Bulletin has no description...
Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws...
CVE-2020-8991
vglookup in daemons/lvmetad/lvmetad-core.c in LVM2 2.02 mismanages memory, leading to an lvmetad memory leak, as demonstrated by running pvs. NOTE: RedHat disputes CVE-2020-8991 as not being a vulnerability since there’s no apparent route to either privilege escalation or to denial of service...
Improper access control
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfslinux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. This vulnerability does not...
CVE-2019-17100
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...
BELL-CVE-2019-11046 CVE-2019-11046 does not affect BellSoft software
Bulletin has no description...
CVE-2019-19692
Trend Micro Apex One 2019 is affected by a cross-site scripting XSS vulnerability on the product console. Note that the Japanese version of the product is NOT affected...
Denial of service
A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected...
CVE-2019-6675
BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromise of the system. This issue only impacts specific...
BELL-CVE-2019-19039 CVE-2019-19039 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-19043 CVE-2019-19043 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-19064 CVE-2019-19064 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2019-19072 CVE-2019-19072 does not affect BellSoft software
Bulletin has no description...