5653 matches found
Debian DSA-019-1 : squid - insecure tempfile handling
WireX discovered a potential temporary file race condition in the way that squid sends out email messages notifying the administrator about updating the program. This could lead to arbitrary files to get overwritten. However the code would only be executed if running a very bleeding edge release ...
Security fix for the ALT Linux 5 package cvs version 1.11.15-alt3
May 25, 2004 Dmitry V. Levin 1.11.15-alt3 - Applied upstream fix for pserver heap overflow CAN-2004-0414...
Security fix for the ALT Linux 5 package cvs version 1.11.15-alt2
May 10, 2004 Dmitry V. Levin 1.11.15-alt2 - Applied upstream fix for pserver heap overflow CAN-2004-0396...
DSA-422 cvs - remote vulnerability
Bulletin has no description...
[SECURITY] [DSA-205-1] gtetrinet buffer overflows
------------------------------------------------------------------------ Debian Security Advisory DSA-205-1 [email protected] http://www.debian.org/security/ Wichert Akkerman December 10, 2002 - ------------------------------------------------------------------------ Package : gtetrinet Problem...
[SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 163-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 140-2 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : libpng, libpng3...
CVE-2023-24593
CVE-2023-24593 is a GLib2 vulnerability described in connected advisories as a DoS caused by GLib handling of non-normal GVariants (text-form variant) that can crash or degrade service when a malicious input is processed. Affected advisories reference multiple vendor advisories (e.g., IBM/EulerOS...
CVE-2023-25180
CVE-2023-25180 is a GLib2 vulnerability described in connected advisories as a denial-of-service issue caused by processing a malicious text-form variant, enabling looping or resource exhaustion. Affected products reference GLib2 packages (glib2) across multiple Linux distributions; upstream note...
CVE-2023-2222
CVE-2023-2222 is rejected/not used as upstream stated.
CVE-2022-0931
The Red Hat 3scale gateway exposes a JWT verification flaw: it does not properly verify the algorithm claim in the token header, enabling an attacker to craft a signed token with improper claims and bypass security restrictions.
