199 matches found
Remote Code Execution
salt is vulnerable to remote code execution. A remote attacker is able to obtain unauthenticated access to the application when the NetAPI is enabled with an SSH roster defined. Subsequently, the rawshell parameter used when calling the Salt SSH client via API allows a remote attacker to execute...
Fedora 29 : dino (2019-0eb6d51f81)
Update dino to a96c8014, which addresses three CVEs. CVE-2019-16235 ============== Dino did not properly check the source of message carbons. https://nvd.nist.gov/vuln/detail/CVE-2019-16235 Fixed in https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc5 49c930 CVE-2019-16236...
Debian: Security Advisory (DSA-4524-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4524-1 : dino-im - security update
Multiple vulnerabilities have been discovered in the Dino XMPP client, which could allow spoofing message, manipulation of a user's roster contact list and unauthorised sending of message carbons. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
[SECURITY] [DSA 4524-1] dino-im security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4524-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2019 https://www.debian.org/security/faq -...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
DEBIAN-CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
Authorization
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
UBUNTU-CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
CVE-2019-16236
CVE-2019-16236 affects the Dino XMPP client (GTK+/Vala). The vulnerability arises from Dino not checking roster push authorization in module/roster/module.vala, enabling potential unauthorized roster push actions. Reported CVSS metrics show two vectors: CVSS v2 base 5.0 (NETWORK/LOW complexity, I...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
CVE-2019-16236
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
PT-2019-4128
Name of the Vulnerable Software and Affected Versions Dino before 2019-09-10 Description The issue is related to insufficient input validation in the /roster/module.vala module of the Dino instant messaging client. This can potentially allow a remote attacker to impact data integrity...
CVE-2019-16236: Missing Authorization
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala...
Updated mailman packages fix a security vulnerability
Updated mailman package fixes security vulnerability: Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed ...
Debian DSA-4108-1 : mailman - security update
Calum Hutton and the Mailman team discovered a cross site scripting and information leak vulnerability in the user options page. A remote attacker could use a crafted URL to steal cookie information or to fish for whether a user is subscribed to a list with a private roster. C Tenable Network...
Debian: Security Advisory (DSA-4108-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : python3-sleekxmpp (openSUSE-2017-137)
This update for python3-sleekxmpp fixes the following issues : - Check the origin of roster pushes 2015-8688, 2016-9928, boo1014976. Also see https://gultsch.de/gajimrosterpushandmessageinterce ption.html - An error in legacyauth support was fixed %NASLMINLEVEL 70300 C Tenable Network Security,...
