Ubuntu: Security Advisory (USN-4693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : Ampache vulnerabilities (USN-4693-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4693-1 advisory. It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data containe...

Debian: Security Advisory (DLA-1988-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12386

CVE-2019-12386 affects Ampache (up to version 3.9.1 per initial entry) via a stored XSS in localplay.php (LocalPlay “add instance” function). The injected script is reflected in the instances menu and can be abused to force an admin to create a new privileged user. Numerous advisories (Debian DLA...