Cross site scripting

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting XSS vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45...

CVE-2018-1000172

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting XSS vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.129-alt0.M80P.1

1:4.4.129-alt0.M80P.1 built April 26, 2018 kernelbot in task 205236 April 24, 2018 Kernel Bot - v4.4.129 Fixes: CVE-2018-1092...

Alt-N MDaeamon Buffer Overflow - Ver2

A buffer overflow vulnerability exists in Alt-N MDaeamon. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Important: Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

RHEL 7 : kernel-alt (RHSA-2018:0654)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0654 advisory. The kernel-alt packages provide the Linux kernel version 4.x. The following packages have been upgraded to a later upstream version:...

alt-goerlitz.de XSS vulnerability

Open Bug Bounty ID: OBB-598777 Description| Value ---|--- Affected Website:| alt-goerlitz.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alt-tshirts.com XSS vulnerability

Open Bug Bounty ID: OBB-598514 Description| Value ---|--- Affected Website:| alt-tshirts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.126-alt0.M80P.1

1:4.4.126-alt0.M80P.1 built April 2, 2018 kernelbot in task 203309 April 1, 2018 Kernel Bot - v4.4.126 Fixes: CVE-2017-8824...

Security fix for the ALT Linux 8 package curl version 7.59.0-alt1

March 31, 2018 Anton Farygin 7.59.0-alt1 - new version - fixes: CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write CVE-2018-1000121 LDAP NULL pointer dereference CVE-2018-1000122 RTSP RTP buffer over-read...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.33-alt1

March 31, 2018 Anton Farygin 1:2.4.33-alt1 - 2.4.33 - fixes: CVE-2018-1303 low: Possible out of bound read in modcachesocache CVE-2018-1302 low: Possible write of after free on HTTP/2 stream shutdown CVE-2018-1301 low: Possible out of bound access after failure in reading the HTTP request...

Security fix for the ALT Linux 10 package apache2 version 1:2.4.33-alt1

March 31, 2018 Anton Farygin 1:2.4.33-alt1 - 2.4.33 - fixes: CVE-2018-1303 low: Possible out of bound read in modcachesocache CVE-2018-1302 low: Possible write of after free on HTTP/2 stream shutdown CVE-2018-1301 low: Possible out of bound access after failure in reading the HTTP request...

Security fix for the ALT Linux 8 package apache2 version 1:2.4.33-alt1

March 31, 2018 Anton Farygin 1:2.4.33-alt1 - 2.4.33 - fixes: CVE-2018-1303 low: Possible out of bound read in modcachesocache CVE-2018-1302 low: Possible write of after free on HTTP/2 stream shutdown CVE-2018-1301 low: Possible out of bound access after failure in reading the HTTP request...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2o-alt1

March 27, 2018 Gleb Fotengauer-Malinovskiy 1.0.2o-alt1 - Updated to v1.0.2o fixes CVE-2018-0739...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2o-alt1

March 27, 2018 Gleb Fotengauer-Malinovskiy 1.0.2o-alt1 - Updated to v1.0.2o fixes CVE-2018-0739...

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2o-alt1

March 27, 2018 Gleb Fotengauer-Malinovskiy 1.0.2o-alt1 - Updated to v1.0.2o fixes CVE-2018-0739...

Security fix for the ALT Linux 10 package firefox-esr version 52.7.3-alt1

March 26, 2018 Andrey Cherepanov 52.7.3-alt1 - New ESR version 52.7.3 - Fixes: + CVE-2018-5148 Use-after-free in compositor...

Security fix for the ALT Linux 10 package thunderbird version 52.7.0-alt1

March 24, 2018 Andrey Cherepanov 52.7.0-alt1 - New version 52.7.0 - Fixes: + CVE-2018-5127 Buffer overflow manipulating SVG animatedPathSegList + CVE-2018-5129 Out-of-bounds write with malformed IPC messages + CVE-2018-5144 Integer overflow during Unicode conversion + CVE-2018-5146 Out of bounds...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.122-alt0.M80P.1

1:4.4.122-alt0.M80P.1 built March 23, 2018 kernelbot in task 202625 --- March 21, 2018 Kernel Bot &[email protected] - v4.4.122 Fixes: CVE-2018-1000004...

Security fix for the ALT Linux 8 package samba version 4.6.14-alt1.1

March 15, 2018 Evgeny Sinelnikov 4.6.14-alt1.1 - Rebuild security release Fixes: CVE-2018-1050, CVE-2018-1057 with old ceph version without libceph-common for c7/c8...