Security update for nextcloud (moderate)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2020:1652-1 Rating: moderate References: 1171572 1171579 1177346 Cross-References: CVE-2020-8154 CVE-2020-8155 CVE-2020-8183 CVE-2020-8228 CVE-2020-8233 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1...

PT-2020-16033 · Hyland · Onbase

Name of the Vulnerable Software and Affected Versions: Hyland OnBase versions prior to 18.0.0.33 and versions 19.x through 19.8.9.1000 Description: An issue exists where directory traversal is possible, allowing writing to files. This is demonstrated through the FileName parameter. Recommendation...

OpenWrt uhttpd Buffer Overflow Vulnerability

OpenWrt is a Linux operating system for embedded devices. uhttpd is one of the HTTP services. A buffer overflow vulnerability exists in uhttpd in OpenWrt versions 18.06.5 and earlier and versions 19.x through 19.07.0-rc2. The vulnerability originates when a network system or product performs an...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-46409)

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site scripting vulnerability exists in Centreon versions prior to 2.8.30, 18.x...

CVE-2019-14818

A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file...

CVE-2019-14818

The CVE-2019-14818 issue affects DPDK packages in multiple lines: 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4, and 19.x.x before 19.08.1. A malicious master or a container with access to a vhost_user socket can send crafted VRING_SET_NUM messages, causing a memory leak th...

Information disclosure

Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation...

Opera < 19 Multiple Vulnerabilities

The version of Opera installed on the remote host is a version prior to version 19. It is, therefore, reportedly affected by multiple unspecified vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72372; scriptversion"1.7";...

53KF Web Instant Messenger Cross Site Scripting

Application: 53KF Web IM Vendor: www.53kf.com Corporation: LiuDu, Inc. Version: Latest: 19 JAN 2009 - Home Edition, Enterprise & Professional Description: 53KF Web IM 2009 Cross-Site Scripting Vulnerabilities Background: ============== 53KF is a web-based group chat tool that lets invite a client...