1073 matches found
Insecure Entropy Source - Math.random() in node-uuid
Affected versions of node-uuid consistently fall back to using Math.random as an entropy source instead of crypto, which may result in guessable UUID's. Recommendation Update to version 1.4.4 or later...
Cross-Site Scripting in sanitize-html
Affected versions of sanitize-html do not sanitize input recursively, which may allow an attacker to execute arbitrary Javascript. Recommendation Update to version 1.4.3 or later...
PT-2020-10127 · Siemens +2 · Simatic S7-300 Cpu 319F-3 Pn/Dp +42
Name of the Vulnerable Software and Affected Versions: SIMATIC ET 200AL IM 157-1 PN version 6ES7157-1AB00-0AB0 SIMATIC ET 200MP IM 155-5 PN HF version 6ES7155-5AA00-0AC0 SIMATIC ET 200pro IM 154-8 PN/DP CPU version 6ES7154-8AB01-0AB0 SIMATIC ET 200pro IM 154-8F PN/DP CPU version 6ES7154-8FB01-0AB...
DLA-2168-1 libplist - security update
Bulletin has no description...
DLA-2167-1 python-bleach - security update
Bulletin has no description...
DLA-2155-1 tomcat8 - security update
Bulletin has no description...
DSA-4645-1 chromium - security update
Bulletin has no description...
DSA-4643-1 python-bleach - security update
Bulletin has no description...
DLA-2147-1 gdal - security update
Bulletin has no description...
DLA-2131-2 rrdtool - regression update
Bulletin has no description...
DSA-4636-1 python-bleach - security update
Bulletin has no description...
SUSE-SU-2020:0474-1 Security update for openssl
This update for openssl fixes the following issues: Security issue fixed: - CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Non-security issue fixed: - Fixed a crash in BNcopy bsc1160163...
DLA-2117-1 zsh - security update
Bulletin has no description...
DSA-4631-1 pillow - security update
Bulletin has no description...
DLA-2106-1 libgd2 - security update
Bulletin has no description...
DSA-4618-1 libexif - security update
Bulletin has no description...
RLSA-2020:0348 Important: container-tools:rhel8 security, bug fix, and enhancement update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcpemu CVE-2020-7039 For more details about the security issues, including the impact, a CVSS score,...
DLA-2094-1 sudo - security update
Bulletin has no description...