Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2019-1585)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2018-1414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for unixODBC (EulerOS-SA-2019-2267)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:0152-1)

This update for samba fixes the following issues : CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable ha...

SUSE-SU-2020:0152-1 Security update for samba

This update for samba fixes the following issues: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing bsc1160888...

CVE-2019-14907

A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability. Mitigation Do not set ...

Crash after failed character conversion at

Description If samba is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process such ...

The vulnerability of the IonMonkey JIT-compiler for Firefox and Firefox ESR browsers lies in the access to resources through incompatible types. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the IonMonkey JavaScript compiler for Firefox and Firefox ESR browsers is related to a data type conversion error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

CVE-2018-16869

A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process could use this flaw extract plain text or, in some cases,...

[SECURITY] Fedora 31 Update: htmldoc-1.9.7-1.fc31

HTMLDOC converts HTML source files into indexed HTML, PostScript, or Portable Document Format PDF files that can be viewed online or printed. With no options a HTML document is produced on stdout. The second form of HTMLDOC reads HTML source from stdin, which allows you to use HTMLDOC as a filter...

WordPress WooCommerce Conversion Tracking plugin <=2.0.4 - Cross-Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF to XSS vulnerability found in WordPress WooCommerce Conversion Tracking plugin versions =2.0.4. Solution Update the WordPress WooCommerce Conversion Tracking plugin to the latest available version at least 2.0.6...

[SECURITY] Fedora 30 Update: htmldoc-1.9.7-1.fc30

HTMLDOC converts HTML source files into indexed HTML, PostScript, or Portable Document Format PDF files that can be viewed online or printed. With no options a HTML document is produced on stdout. The second form of HTMLDOC reads HTML source from stdin, which allows you to use HTMLDOC as a filter...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. ' /...

WooCommerce Conversion Tracking < 2.0.5 - CSRF to XSS

The settings page of the plugin is lacking CSRF checks as well as input sanitisation, leading to stored XSS. PoC...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

Code injection

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655

IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticated user to reset client connections due to an error within the Data Conversion routine. IBM X-Force ID: 170966...

CVE-2019-4655

CVE-2019-4655 affects IBM MQ (9.1.x: 9.1.0.0–9.1.3) and IBM MQ Appliance; vulnerability arises from an error in the Data Conversion routine that could allow an authenticated user to reset client connections, causing a denial of service. Impact is a DoS on channel handling by triggering failure da...

PT-2019-6181 · Fig2Dev +3 · Fig2Dev +3

Name of the Vulnerable Software and Affected Versions: fig2dev version 3.2.7b Description: A stack-based buffer overflow in the genpstrx text component in genpstricks.c of fig2dev allows attackers to cause a denial of service DOS via converting a xfig file into pstricks format. Recommendations: F...