[SECURITY] Fedora 29 Update: firefox-68.0-4.fc29

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Regular Expression Denial of Service

Overview Affected versions of marked are vulnerable to Regular Expression Denial of Service ReDoS. The label subrule may significantly degrade parsing performance of malformed input. Recommendation Upgrade to version 0.7.0 or later. References GitHub Advisory...

SolarWinds Network Performance Monitor SQL Injection Vulnerability

SolarWinds Network Performance Monitor NPM is a network performance monitor from SolarWinds, Inc. that provides monitoring and reporting, tracking of up/down status, real-time analytics, and network performance statistics for routers, virtualized environments, and other devices. A SQL injection...

CVE-2018-13442

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...

Sql injection

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...

PT-2019-8970

Name of the Vulnerable Software and Affected Versions SolarWinds Network Performance Monitor version 12.3 Description The issue allows SQL Injection via the "/api/ActiveAlertsOnThisEntity/GetActiveAlerts" TriggeringObjectEntityNames parameter. Recommendations For SolarWinds Network Performance...

CVE-2018-13442: Improper Neutralization of Special Elements used in an SQL Command

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter...

[SECURITY] Fedora 30 Update: firefox-68.0-4.fc30

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Command Execution Vulnerability in Arifang Technology 4G Module Performance King N720

Shenzhen Youfang Technology Co., Ltd. is an enterprise focusing on M2M IoT wireless communication products and services, providing industrial module products and related services in GPRS, CDMA 1X, WCDMA, EVDO, LTE and other communication standards. A command execution vulnerability exists in the ...

Code injection

IBM Application Performance Management IBM Monitoring 8.1.4 could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270...

CVE-2019-4131

IBM Application Performance Management (IBM Monitoring 8.1.4) is affected by CVE-2019-4131, where a remote attacker could induce the Cloud APM server to perform server-side DNS lookups for arbitrary domain names. Affected products/versions: IBM Cloud Application Performance Management, Base Priva...

CVE-2019-4131: Undefined Security Weakness

IBM Application Performance Management IBM Monitoring 8.1.4 could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270...

PT-2019-16912

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management version 8.1.4 Description The issue allows a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. Recommendations For version 8.1.4, at the moment, there...

SUSE SLED15 / SLES15 Security Update : cf-cli (SUSE-SU-2019:1220-2)

"This update for cf-cli fixes the following issues : cf-cli was updated: to version 6.43.0 bsc1132242 Enhancements : cf curl supports a new --fail flag primarily for scripting purposes which returns exit code 22 for server errors story Improves cf delete-orphaned-routes such that it uses a...

Security Bulletin: IBM Application Performance Management could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names (CVE-2019-4131)

Summary IBM Application Performance Management could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. Vulnerability Details CVEID: CVE-2019-4131 DESCRIPTION: IBM Application Performance Management could allow a remote attacker to indu...

Fedora Update for GraphicsMagick FEDORA-2019-da4c20882c

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Pixel Update Bulletin—July 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel devices Google devices. For Google devices, security patch levels of 2019-07-05 or higher address all issues in this bulletin and all issues in the July 2019 Android...

Fedora 30 : glpi (2019-2bad806189)

Version 9.4.3 This is a security release, upgrading is highly recommended Non exhaustive list of changes : - security Prevent execution of XSS on rich text, - security Prevent xss attack on user picture, - Fix performance issues when using entities, - New Prevent take into account action on ticke...

[SECURITY] Fedora 30 Update: pdns-4.1.10-1.fc30

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

[SECURITY] Fedora 30 Update: GraphicsMagick-1.3.32-1.fc30

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...