[SECURITY] Fedora 32 Update: nss-3.51.0-1.fc32

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Rocket.Chat: Desktop app RCE (#276031 bypass)

Summary: 276031 fix bypass, two click remote code execution. Description: The security issue is in links preload file https://github.com/RocketChat/Rocket.Chat.Electron/blob/master/src/preload/links.js file. By rewriting RegExp.prototype.test method it is possible to prepare proper answers to get...

Arbitrary File Download Vulnerability in Feifei Movie Navigation System

Fei Fei Movie Navigation System is developed by PHP+Mysql technology, which can run on windows and Linux system platform. An arbitrary file download vulnerability exists in Feifei Movie & TV Navigation System, which can be exploited by attackers to compromise confidentiality...

Ruby Unauthorized Operation Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the software developer Gyohiro Matsumoto. A security vulnerability exists in Ruby. An attacker can exploit this vulnerability to create arbitrary files...

Ruby Information Disclosure Vulnerability (CNVD-2020-23171)

Ruby is a cross-platform, object-oriented, dynamically typed programming language from the software developer Gyohiro Matsumoto. A security vulnerability exists in Ruby. An attacker could exploit this vulnerability to obtain sensitive information...

Ocean cms has arbitrary file reading vulnerability

Ocean CMS is a building system based on PHP+MYSQL architecture and supports cross-platform operation. Ocean cms there are arbitrary file reading vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Xinhuo OA Office System

Xinhu OA office system is an open source and cross-platform office system. SQL injection vulnerability exists in Xinhao OA Office System, which can be exploited by attackers to obtain sensitive information from the database...

Heap Overflow Vulnerability in FreeImage BMP File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . A heap overflow vulnerability exists in the FreeImage image parsing library when parsing BMP files. An attacke...

File Upload Vulnerability in Born Creative OA System

Born Creative OA office system for the first domestic open source OA software producers, using the leading B / S architecture, cross-platform language php + mysql and other flexible applications, is one of China's most extensive user base of OA software. Born Creative OA system file upload...

Command Execution Vulnerability in seacms Backend

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A code execution vulnerability exists in the backend of seacms, which can be exploited by attackers to execute malicious code...

[SECURITY] Fedora 31 Update: mingw-SDL-1.2.15-14.fc31

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

Design/Logic Flaw

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security Gateway, Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and...

CVE-2020-9320

Avira AV Engine before 8.3.54.138 is vulnerable to a virus-detection bypass via a specially crafted ISO archive. Affected products and versions include Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suit...

PT-2020-20581 · Avira · Antivirus For Endpoint +7

Name of the Vulnerable Software and Affected Versions: Avira AV Engine versions prior to 8.3.54.138 Antivirus for Endpoint versions prior to 8.3.54.138 Antivirus for Small Business versions prior to 8.3.54.138 Exchange Security Gateway versions prior to 8.3.54.138 Internet Security Suite for...

Heap Overflow Vulnerability in FreeImage TGA File Parsing

FreeImage is a free , open source , cross-platform Windows, Linux and Mac OS X , supports more than 20 types of images such as BMP, JPEG, GIF, PNG, TIFF , etc. image processing library . The FreeImage image parsing library suffers from a heap overflow vulnerability when parsing TGA files. An...

[SECURITY] Fedora 31 Update: mingw-SDL2-2.0.10-1.fc31

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device...

Fedora: Security Advisory for mingw-SDL2 (FEDORA-2020-ff2fe47ba4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Qiling - Advanced Binary Emulation Framework

Qiling is an advanced binary emulation framework, with the following features: Cross platform: Windows, MacOS, Linux, BSD Cross architecture: X86, X8664, Arm, Arm64, Mips Multiple file formats: PE, MachO, ELF Emulate & sandbox machine code in a isolated environment Provide high level API to setup...