Debian dsa-6034 : tryton-sao - security update

The remote Debian 12 / 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6034 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6034-1 [email protected] https://www.debian.org/security/...

DSA-6034-1 tryton-sao - security update

Bulletin has no description...

EUVD-2018-0142

Malware in sbrugna...

EUVD-2019-0144

Malware in sbrugna...

EUVD-2016-0036

Malware in sbrugna...

EUVD-2016-0037

Malware in sbrugna...

EUVD-2018-0143

Malware in sbrugna...

EUVD-2013-0042

Malware in sbrugna...

EUVD-2012-0030

Malware in sbrugna...

EUVD-2017-0137

Malware in sbrugna...

EUVD-2022-0342

Malicious code in bioql PyPI...

EUVD-2022-0343

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-26662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XML Entity Expansion XEE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5...

Linux Distros Unpatched Vulnerability : CVE-2018-19443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and...

Linux Distros Unpatched Vulnerability : CVE-2022-26661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton...

Linux Distros Unpatched Vulnerability : CVE-2017-0360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a same root name but with a...

Linux Distros Unpatched Vulnerability : CVE-2016-1242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with...

Linux Distros Unpatched Vulnerability : CVE-2019-10868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated us...

Linux Distros Unpatched Vulnerability : CVE-2016-1241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user...

CVE-2012-0215

model/modelstorage.py in the Tryton application framework trytond before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a 1 create, 2 write, 3 delete, or 4 cop...