762 matches found
Improper access control
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...
Security update for libtomcrypt (moderate)
openSUSE Security Update: Security update for libtomcrypt Announcement ID: openSUSE-SU-2019:2514-1 Rating: moderate References: 1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
CVE-2019-5231
P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...
DSA-4554-1 ruby-loofah - security update
Bulletin has no description...
CVE-2019-15019
A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector...
Security update for mosquitto (moderate)
openSUSE Security Update: Security update for mosquitto Announcement ID: openSUSE-SU-2019:2206-1 Rating: moderate References: 1151494 Cross-References: CVE-2019-11779 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
SUSE-SU-2019:2460-1 Security update for ghostscript
This update for ghostscript fixes the following issues: Security issues fixed: - CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. bsc1129180 - CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators...
WordPress stops-core-theme-and-plugin-updates plugin has unspecified vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. stops-core-theme-and-plugin-updates is an update management plugin that is used to manage updates to WordPress and its related plugins...
WordPress Learning Courses plugin <= 4.7 - Unauthenticated Options Change vulnerability
Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Learning Courses plugin versions = 4.7. Solution Update the WordPress Learning Courses plugin to the latest available version at least 4.8...
CVE-2019-12162
Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code execution or local privilege escalation by replacing the original update.exe...
The vulnerability of the update function of the Cisco Industrial Network Director software arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Industrial Network Director software update function exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
Breadcrumbs by menu <= 1.0.1 - Multiple Issues
XSS, CSRF leading to options update...
SUSE-SU-2019:0925-1 Security update for wget
This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution bsc1131493...
CVE-2017-17023
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...
Security update for libgxps (moderate)
openSUSE Security Update: Security update for libgxps Announcement ID: openSUSE-SU-2019:1120-1 Rating: moderate References: 1092125 Cross-References: CVE-2018-10733 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libgxps...
CVE-2019-10658
Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/controller.icc.updatendswebrootfromtmp updatendswebrootfromtmp API call...
Information disclosure
A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call the toString method on an object even if not allowed by the security policy in place...
Security update for wget (important)
openSUSE Security Update: Security update for wget Announcement ID: openSUSE-SU-2019:0057-1 Rating: important References: 1120382 Cross-References: CVE-2018-20483 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for wget fixes...
SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2018:2976-1)
This update for ghostscript to version 9.25 fixes the following issues : These security issues were fixed : CVE-2018-17183: Remote attackers were be able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code bsc1109105 CVE-2018-15909: Prevent type confusio...