5140 matches found
openSUSE Security Update : ecryptfs-utils (openSUSE-2018-126)
This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2018:0336-1)
This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
SUSE-SU-2018:0336-1 Security update for ecryptfs-utils
This update for ecryptfs-utils fixes the following issues: - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...
[SECURITY] Fedora 27 Update: coreutils-8.27-19.fc27
These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages...
OracleVM 3.3 / 3.4 : bind (OVMSA-2018-0014)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-3145 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0014. include'compat.inc'; if description scriptid106291;...
Fedora 27 : sensible-utils (2017-2fab3f12c4)
Update to version 0.0.11, see http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils /sensible-utils0.0.11changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...
CVE-2015-2298: Exposure of Sensitive Information to an Unauthorized Actor
node/utils/ExportEtherpad.js in Etherpad 1.5.x before 1.5.2 might allow remote attackers to obtain sensitive information by leveraging an improper substring check when exporting a padID...
Debian: Security Advisory (DLA-1236-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1236-1 : plexus-utils security update
Charles Duffy discovered that the Commandline class in plexus-utils, a collection of components used by Apache Maven, does not correctly quote the contents of double-quoted strings. An attacker may use this flaw to inject arbitrary shell commands. For Debian 7 'Wheezy', these problems have been...
[SECURITY] [DLA 1236-1] plexus-utils security update
Package : plexus-utils Version : 1:1.5.15-4+deb7u1 CVE ID : CVE-2017-1000487 Charles Duffy discovered that the Commandline class in plexus-utils, a collection of components used by Apache Maven, does not correctly quote the contents of double-quoted strings. An attacker may use this flaw to injec...
DLA-1236-1 plexus-utils - security update
Bulletin has no description...
Plexus-utils Command Injection Vulnerability
Plexus-utils is an open source collection of multiple utility classes. A command injection vulnerability exists in versions of Plexus-utils prior to 3.0.16. No details of the vulnerability are provided at this time...
Opencv Integer Overflow Vulnerability
Opencv is an open source, cross-platform, lightweight computer vision library. The 'FillUniColor' and 'FillUniGray' functions in the opencv/modules/imgcodecs/src/utils.cpp file in Opencv 3.3 and earlier have an integer overflow vulnerability that stems from the program failing to detect the lengt...
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
DEBIAN-CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
CVE-2017-1000487
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
Command injection
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings...
CVE-2017-1000487
Plexus-utils (component: Plexus-utils library) is vulnerable prior to version 3.0.16 due to improper handling of contents inside double-quoted strings, enabling potential command injection. Affected product references indicate compatibility and remediation paths, with fixes available in 3.0.16 or...
