Security update for rubygem-excon (moderate)

openSUSE Security Update: Security update for rubygem-excon Announcement ID: openSUSE-SU-2020:0139-1 Rating: moderate References: 1159342 Cross-References: CVE-2019-16779 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This...

Updated libbsd packages fix security vulnerability

It was discovered that libbsd incorrectly handled certain strings, due to an out-of-bounds read during a comparison for a symbol name from the string table strtab in nlist.c. An attacker could possibly use this issue to access sensitive information CVE-2019-20367...

CVE-2014-9625

The GetUpdateFile function in misc/update.c in the Updater in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to conduct buffer overflow attacks and execute arbitrary code via a crafted update...

Security update for trousers (moderate)

openSUSE Security Update: Security update for trousers Announcement ID: openSUSE-SU-2020:0015-1 Rating: moderate References: 1157651 Cross-References: CVE-2019-18898 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for trouser...

The vulnerability of the automatic update function of the corporate VPN application GlobalProtect Agent for Windows allows a intruder to increase their privileges.

The vulnerability of the automatic update function of the corporate VPN application, GlobalProtect Agent for Windows, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges by loading the modified MSI installer onto the disk...

Improper access control

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...

Security update for libtomcrypt (moderate)

openSUSE Security Update: Security update for libtomcrypt Announcement ID: openSUSE-SU-2019:2514-1 Rating: moderate References: 1153433 Cross-References: CVE-2019-17362 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

DSA-4554-1 ruby-loofah - security update

Bulletin has no description...

CVE-2019-15019

A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector...

Security update for mosquitto (moderate)

openSUSE Security Update: Security update for mosquitto Announcement ID: openSUSE-SU-2019:2206-1 Rating: moderate References: 1151494 Cross-References: CVE-2019-11779 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

SUSE-SU-2019:2460-1 Security update for ghostscript

This update for ghostscript fixes the following issues: Security issues fixed: - CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. bsc1129180 - CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators...

WordPress stops-core-theme-and-plugin-updates plugin has unspecified vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. stops-core-theme-and-plugin-updates is an update management plugin that is used to manage updates to WordPress and its related plugins...

WordPress Learning Courses plugin <= 4.7 - Unauthenticated Options Change vulnerability

Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Learning Courses plugin versions = 4.7. Solution Update the WordPress Learning Courses plugin to the latest available version at least 4.8...

CVE-2019-12162

Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code execution or local privilege escalation by replacing the original update.exe...

The vulnerability of the update function of the Cisco Industrial Network Director software arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Industrial Network Director software update function exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

Breadcrumbs by menu <= 1.0.1 - Multiple Issues

XSS, CSRF leading to options update...

SUSE-SU-2019:0925-1 Security update for wget

This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution bsc1131493...

CVE-2017-17023

The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...

Security update for libgxps (moderate)

openSUSE Security Update: Security update for libgxps Announcement ID: openSUSE-SU-2019:1120-1 Rating: moderate References: 1092125 Cross-References: CVE-2018-10733 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libgxps...