2047 matches found
CVE-2018-12089
In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Service Fabric Cluster target is configured in Azure Active Directory security mode and a deployment is executed with OctopusPrintVariables set to True. This is...
UBUNTU-CVE-2018-0737
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev Affected 1.1.0-1.1.0h...
UBUNTU-CVE-2018-1000119
Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to hav...
OPENSUSE-SU-2018:0589-1 Security update for go
This update for go fixes the following issues: Security issues fix in version 1.9.4: - CVE-2018-6574: 'go get' remote command execution during source code build bsc1080006. Bug fixes: - bsc1082409: Review dependencies requires, recommends and supports. This update was imported from the...
Debian DLA-1065-1 : fontforge security update
FontForge is vulnerable to heap-based buffer over-read in several functions, resulting in DoS or code execution via a crafted otf file : For Debian 7 'Wheezy', these problems have been fixed in version 0.0.20120101+git-2+deb7u1. We recommend that you upgrade your fontforge packages. NOTE: Tenable...
[SECURITY] [DSA 3940-1] cvs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3940-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 13, 2017 https://www.debian.org/security/faq -...
SUSE-SU-2017:2032-1 Security update for wireshark
This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed: - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. bsc1049621 - CVE-2017-11410: The WBXML dissector could go into an infinite loop. bsc104925...
CVE-2017-7228
An issue known as XSA-212 was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEMexchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arra...
DSA-3651-1 rails - security update
Bulletin has no description...
SUSE-SU-2016:1839-1 Security update for obs-service-source_validator
This update for obs-service-sourcevalidator to version 0.6+git20160531.fbfe336 fixes one security issue. This security issue was fixed: - CVE-2016-4007: harden source services against code/parameter injection bsc967265 This non-security issue was fixed: - bsc967610: Several occurrences of...
DSA-3543-1 oar - security update
Bulletin has no description...
DSA-3463-1 prosody - security update
Bulletin has no description...
SUSE-SU-2015:2168-2 Security update for java-1_7_1-ibm
The java-171-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...
SUSE-SU-2015:2182-1 Security update for java-1_7_1-ibm
The java-171-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844...
Network, Netgear routers are exposed to severe DNS vulnerability,vulnerable to hacking-vulnerability warning-the black bar safety net
! Recently, the network device Netgear routers is found that there is a serious DNS vulnerability, at present, the network member has not yet patched the published vulnerabilities, which allow attackers to tamper with the affected router's DNS settings, it will affect its router security, estimat...
SUSE SLES12 Security Update : docker (SUSE-SU-2015:0984-1)
The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues. - Security : - Fix read/write /proc paths. CVE-2015-3630 - Prohibit VOLUME /proc and VOLUME /. CVE-2015-3631 - Fix opening of file-descriptor 1. CVE-2015-3627 - Fix symlink...
DSA-3264-1 icedove - security update
Bulletin has no description...
Remote File Upload Vulnerability in WordPress Ultimate Product Catalogue Plugin
Product Description: ------------------- Ultimate Product Catalog plugin is designed to help WordPress sites administrators display products quickly and easily in an attractive and customizable layout, making your catalogue easy to browse, sort and update with categories, sub-categories, and tags...
Fedora 20 : perl-DBD-Firebird-1.19-1.fc20 (2015-5601)
DBD::Firebird 1.19 2015-03-22 =============================== - Fix $VERSION in Firebird.pm - Fix typo in ISCPASSWORD spelling - Positive logic and early return - Allow re-executing/fetch on prepared sth RT92810, Tux - Add rests for $dbh-Name and others - Implement $dbh-Name - Fix attributions to...