PT-2020-10382

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 7.0 NG 742 Description The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip src parameter in an "index.php?operation/netflow/nf live view" request. This i...

Unrestricted file upload

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...

CVE-2020-5514: Unrestricted Upload of File with Dangerous Type

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...

PT-2020-18491

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.11.8 Description The issue allows for the unrestricted upload of a file with a dangerous type via .phar or .phtml to the /lzld/thumb?src= API endpoint. This could potentially lead to security risks. Recommendations For Gila...

OS Command Injection

mikehaertl/php-shellcommand is vulnerable to OS command injection. The addArg function in src/Command.php does not escape all arguments, allowing an attacker to inject arbitrary OS commands...

CVE-2019-13445

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...

CVE-2019-13445: Integer Overflow or Wraparound

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...

WS-2019-0538

open thread in versions thread-reference-20170716 to thread-reference-20191113 is vulnerable to Stack-buffer-overflow, related to src/core/meshcop/commissioner.cpp...

WS-2019-0565

nDPI in versions 2.4 to 3.0 is vulnerable toHeap-buffer-overflow in ndpiintcheckstun, related to src/lib/protocols/stun.c...

WS-2019-0546

nDPI in versions 3.0 is vulnerable to Heap-buffer-overflow in ndpisearchmemcached , related to src/lib/protocols/memcached.c...

Design/Logic Flaw

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGLDRIVERSPATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen...

CVE-2011-3350

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...

CVE-2011-3350: Improper Check for Dropped Privileges

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...

PT-2019-6665

Name of the Vulnerable Software and Affected Versions masqmail versions 0.2.21 through 0.2.30 Description The issue arises from improper calls to seteuid in the src/log.c and src/masqmail.c files, leading to improper privilege dropping. Recommendations For masqmail versions 0.2.21 through 0.2.30,...

PT-2019-15694

Name of the Vulnerable Software and Affected Versions wolfSSL versions 4.1.0 through 4.2.0c Description The issue arises from missing sanity checks of memory accesses in parsing ASN.1 certificate data during handshaking. Specifically, a one-byte heap-based buffer overflow occurs inside the...

WS-2019-0575

OpenSC in versions 0.19.0-rc1 to 0.20.0-rc3 is vulnerable to Heap-buffer-overflow in parsesecattr44, related to src/libopensc/card-setcos.c...

Debian: Security Advisory (DSA-4556-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4556-1 : qtbase-opensource-src - security update

An out-of-bounds memory access was discovered in the Qt library, which could result in denial of service through a text file containing many directional characters. The oldstable distribution stretch is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-4556-1 qtbase-opensource-src - security update

Bulletin has no description...

Medium: libcgroup

Issue Overview: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.CVE-2018-14348 Affected Packages: libcgroup Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...