[SECURITY] Fedora 30 Update: ghostscript-9.26-5.fc30

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

Fedora Update for ghostscript FEDORA-2019-93e0145607

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1880-1 Security update for live555

This update for live555 fixes the following issues: - CVE-2019-9215: Malformed headers could have lead to invalid memory access in the parseAuthorizationHeader function. boo1127341 - CVE-2019-7314: Mishandled termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up could have lead t...

Jenkins Script Security Plugin Code Execution

The vulnerability of Jenkins Script Security plugin is related to incorrect type conversion. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or gain unauthorized access to confidential information...

NewStart CGSL MAIN 4.05 : libguestfs Vulnerability (NS-SA-2019-0110)

The remote NewStart CGSL host, running version MAIN 4.05, has libguestfs packages installed that are affected by a vulnerability: - An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow o...

CVE-2017-18455

In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...

CVE-2017-18455

In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...

CVE-2017-18455

In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...

CVE-2017-18455

CVE-2017-18455 affects cPanel prior to 62.0.17, where addon domain conversion did not require a package for resellers (SEC-208). The available connected documents confirm the same description across Red Hat, CVE lists, and other feeds, but do not provide explicit exploitation details or a cited r...

CVE-2017-18432

CVE-2017-18432 affects cPanel prior to 64.0.21, specifically the Horde MySQL to SQLite conversion process. The underlying issue is a leakage of a database password (SEC-234) during the conversion, enabling potential disclosure of database credentials. This vulnerability has a high impact on confi...

CVE-2017-18422

CVE-2017-18422 affects cPanel before 66.0.2. During EasyApache 4 conversion, ownership and permissions for domlog are set weakly, creating a potential partial confidentiality impact. Root cause: misconfigured ownership/permissions in the domlog during EasyApache 4 conversion. Practical impact is ...

CVE-2017-18411

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...

CVE-2017-18411

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...

CVE-2017-18455: Undefined Security Weakness

In cPanel before 62.0.17, addon domain conversion did not require a package for resellers SEC-208...

CVE-2017-18432: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password SEC-234...

CVE-2017-18411: Improper Input Validation

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...

PT-2019-8346

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue concerns the "addon domain conversion" feature in cPanel, which can copy all MySQL databases to the new account. Recommendations For versions prior to 67.9999.103, update to version...

Remote Code Execution (RCE)

jackson-databind is vulnerable to remote code execution RCE. The attack is possible due to lack of proper handling of gadget type conversion when ehcache is used...

OPENSUSE-SU-2019:1797-1 Security update for live555

This update for live555 fixes the following issues: - CVE-2019-9215: Malformed headers could have lead to invalid memory access in the parseAuthorizationHeader function. boo1127341 - CVE-2019-7314: Mishandled termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up could have lead t...

CVE-2019-1010228

OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress file dcrledec.h, line 122. The attack vector is: Many scenarios of DICOM file processing e.g. DICOM to image...