RLSA-2021:4586 Moderate: gcc-toolset-11-gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were...

Moderate: gcc-toolset-11-gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were...

ALSA-2021:4586 Moderate: gcc-toolset-11-gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were...

gcc-toolset-10-gcc security update

An update is available for gcc-toolset-10-gcc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gcc packages provide compilers for C, C++, Java, Fortran,...

RLSA-2021:4585 Moderate: gcc-toolset-10-gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were...

news.abidjan.net Cross Site Scripting vulnerability OBB-2253330

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-23604 · Busybox +3 · Busybox +3

Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: An issue in Busybox's ash applet causes a denial of service when it processes a specially crafted shell command. This happens because the shell incorrectly identifies certain characters as...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

Session fixation

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

Design/Logic Flaw

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The faxextension may have risky characters it is not constrained to be numeric...

CVE-2021-43406

FusionPBX is affected before version 4.5.30. The issue stems from fax_post_size not being constrained to preset values, allowing risky characters to pass to downstream handling. CVSSv3.1 base score is 8.8 (HIGH), with network attack, low complexity, privileges required: LOW, no user interaction. ...

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The faxpostsize may have risky characters it is not constrained to preset values...

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters...

CVE-2021-43404

CVE-2021-43404 affects FusionPBX prior to 4.5.30, where the FAX file name may contain risky characters. The issue is defined with both CVSS vectors (2.0: 6.5 (MEDIUM), 3.1: 8.8 (HIGH)) indicating network-accessible impact with high confidentiality, integrity, and availability implications. Connec...