2740 matches found
[SECURITY] Fedora 27 Update: mkvtoolnix-28.2.0-1.fc27
Mkvtoolnix is a set of utilities to mux and demux audio, video and subtitle streams into and from Matroska containers...
Important kernel security update: CVE-2018-5391 and other issues; new kernel 2.6.32-042stab134.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab134.3 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0. The new kernel introduces security and stability fixes. Vulnerability id: CVE-2018-5391 A flaw named FragmentSmack was found in the way the Linux kernel handled reassembly of...
CVE-2018-17046
translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...
Code injection
translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...
CVE-2018-17046
CVE-2018-17046 affects the Translate Man browser plugin. The root cause is a cross-site scripting vulnerability in the Vue components containers/outputBox/outputBox.vue and store/index.js. The vulnerability can allow an attacker to inject and execute script in the context of a user’s session, as ...
translate man cross-site scripting vulnerability
translate man is a browser plugin that can call the Google Translate interface. A cross-site scripting vulnerability exists in versions of translate man prior to 2018-08-21. A remote attacker can exploit the vulnerability to execute malicious code with the help of the...
CVE-2018-16518
A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...
Directory traversal
A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an...
CVE-2018-16518
Affected software: Prim'X Zed! FREE (up to 1.0 build 186) and Zed! Limited Edition (up to 6.1 build 2208). Vulnerability type: directory traversal with remote code execution. Root cause / vector: watermark loading function can place an executable file into a Startup folder via crafted ZED! contai...
Securing Container Deployments with Qualys
With container adoption booming, security teams must protect the applications that DevOps teams create and deploy using this method of OS virtualization. The security must be comprehensive across the entire container lifecycle, and built into the DevOps pipeline in a way that is seamless and...
Kernel update: New kernel 2.6.32-042stab133.2 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab133.2 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0. The new kernel introduces a stability fix. Vulnerability id: PSBM-87976, OVZ-7048, OVZ-7049 Regression in 2.6.32-042stab133.1: Host could crash during processing of quite rare...
IBM WebSphere Application Server Liberty Information Disclosure Vulnerability (CNVD-2018-17070)
IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications and the foundation of the IBM WebSphere software platform.Liberty is a dynamic server profile for WAS. An information...
GLSA-201808-02 : LinuX Containers user space utilities: Arbitrary file read
The remote host is affected by the vulnerability described in GLSA-201808-02 LinuX Containers user space utilities: Arbitrary file read lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check...
LinuX Containers user space utilities: Arbitrary file read
Background LinuX Containers user space utilities. Description lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn’t otherwise be able to reac...
Important kernel security update: CVE-2018-3620 and other issues; new kernel 2.6.32-042stab133.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab133.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 that is a rebase to the Red Hat Enterprise Linux 6.10 kernel 2.6.32-754.3.5.el6. The new kernel inherits a number of security fixes from the new RHEL kernel and introduces intern...
[SECURITY] Fedora 28 Update: cri-o-1.11.1-1.git1759204.fc28
Kubernetes Container Runtime Interface for OCI-based containers...
Kernel update: Virtuozzo ReadyKernel patch 57.0 for Virtuozzo 7.0.7 to 7.0.8
The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to kernels 3.10.0-693.17.1.vz7.43.10 7.0.7, 3.10.0-693.21.1.vz7.46.7 7.0.7 HF2, 3.10.0-693.21.1.vz7.48.2 7.0.7 HF3, 3.10.0-862.9.1.vz7.63.3 7.0.8. Vulnerability id: PSBM-87338 Kernel module 'ipset' trie...
DEBIAN-CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
