CVE-2013-1867

Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability...

MGASA-2020-0058 Updated samba packages fix security vulnerabilities

The implementation of ACL inheritance in the Samba AD DC was not complete, and so absent a 'full-sync' replication, ACLs could get out of sync between domain controllers CVE-2019-14902. When processing untrusted string input Samba can read past the end of the allocated buffer when printing a...

Exploit for CVE-2020-2551

Twitter: @Hktalent3135773...

CVE-2019-19807

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimeropen and sndtimercloselocked. The timeri variable was originally intended to be for a newly created timer instance, but was used for a...

OPENSUSE-SU-2019:2591-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 WSA-2019-0005 and WSA-2019-0006, bsc1155321 bsc1156318 Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead t...

CVE-2019-19242

CVE-2019-19242 affects SQLite 3.30.1, where mishandling of pExpr->y.pTab in sqlite3ExprCodeTarget (TK_COLUMN) causes a NULL pointer dereference in sqlite3ExprCodeTarget, potentially crashing the process. CVSSv3 base score 5.9 (MEDIUM). The Astra Linux bulletin confirms the SQLite 3.30.1 refere...

CVE-2019-13695

Use after free in audio in Google Chrome on Android prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

whatson-kiev.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting whatson-kiev.com website and its users. Following...

SUSE-SU-2019:2983-1 Security update for ghostscript

This update for ghostscript fixes the following issue: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275...

collection-pontdesarts.fr Cross Site Scripting vulnerability

Security Researcher Hchabik Helped patch 2350 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting collection-pontdesarts.fr website and its users. Following...

mmt-online.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-1008868 Security Researcher IfrahIman Helped patch 53 vulnerabilities Received 2 Coordinated Disclosure badges Received 1 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting mmt-online.co.uk website an...

OPENSUSE-SU-2019:2441-1 Security update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2019:2809-1 Security update for php7

This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via envpathinfo underflow in fpmmain.c bsc1154999...

Kernel security update: Virtuozzo ReadyKernel patch 88.0 for Virtuozzo 7.0.7

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernel 3.10.0-693.17.1.vz7.43.10 Virtuozzo 7.0.7. NOTE: No more patches are planned for this kernel, support for which ends with this update. Vulnerability id: CVE-2019-11810...

OPENSUSE-SU-2019:2052-1 Security update for slurm

This update for slurm to version 18.08.8 fixes the following issues: Security issue fixed: - CVE-2019-12838: Fixed a SQL injection in slurmdbd bsc1140709. This update was imported from the SUSE:SLE-15-SP1:Update update project...

CVE-2016-10905

An issue was discovered in fs/gfs2/rgrp.c in the Linux kernel before 4.8. A use-after-free is caused by the functions gfs2clearrgrpd and readrindexentry...

Kernel security update: Virtuozzo ReadyKernel patch 85.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 3.0

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernels 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11 and Virtuozzo Infrastructure Platform 3.0. Vulnerability id: CVE-2018-16871 nfs: NULL pointer dereference due to an anomalized NFS...

CVE-2018-20954

The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys...

CVE-2019-14486

GnuCOBOL 2.2 has a buffer overflow in cbevaluateexpr in cobc/field.c via crafted COBOL source code...

DEBIAN-CVE-2019-2762

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...