1065 matches found
DLA-1225-1 asterisk - security update
Bulletin has no description...
Arbitrary Code Execution in mathjs
math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Recommendation Update to version 3.17.0 or later...
DSA-4068-1 rsync - security update
Bulletin has no description...
DLA-1201-1 libxcursor - security update
Bulletin has no description...
SUSE-SU-2017:3080-1 Security update for openstack-nova
This update for openstack-nova brings the latest version provided by the OpenStack upstream project including the following security fix: - CVE-2017-16239: Filter Scheduler bypass through rebuild action bsc1066198...
DLA-1183-1 samba - security update
Bulletin has no description...
JVN#18420340: Multiple vulnerabilities in BOOK WALKER for Windows/Mac
BOOK WALKER for Windows/Mac provided by BOOK WALKER Co.,Ltd. are applications to view e-books. Installer of BOOK WALKER for Windows contains a vulnerabirity, which may lead to insecurely loading Dynamic Link Libraries. Also BOOK WALKER for Windows/Mac contain a vulnerability which may lead to...
DSA-4030-1 roundcube - security update
Bulletin has no description...
DLA-1166-2 tomcat7 - regression update
Bulletin has no description...
DSA-4015-1 openjdk-8 - security update
Bulletin has no description...
GHSA-333X-9VGQ-V2J4 Directory Traversal in geddy
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...
Symlink Arbitrary File Overwrite in tar
Versions of tar prior to 2.0.0 are affected by an arbitrary file write vulnerability. The vulnerability occurs because tar does not verify that extracted symbolic links to not resolve to targets outside of the extraction root directory. Recommendation Update to version 2.0.0 or later...
Directory Traversal in geddy
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...
DSA-4002-1 mysql-5.5 - security update
Bulletin has no description...
DSA-3999-1 wpa - security update
Bulletin has no description...
DLA-1124-1 dnsmasq - security update
Bulletin has no description...
DSA-3987-1 firefox-esr - security update
Bulletin has no description...
DLA-1110-1 samba - security update
Bulletin has no description...
DSA-3983-1 samba - security update
Bulletin has no description...
DLA-1102-1 apache2 - security update
Bulletin has no description...