Lucene search
+L

32 matches found

OSV
OSV
added 2021/06/18 7:03 a.m.8 views

SUSE-SU-2021:2010-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: python-JWT was updated to 1.5.3. bsc1186173 update to version 1.5.3: Changed + Increase required version of the cryptography package to =1.4.0. Fixed + Remove uses of deprecated functions from the cryptography package. + Warn about missing...

6.3AI score
SaveExploits0References3
OSV
OSV
added 2021/04/28 4:32 p.m.6 views

SUSE-RU-2021:1414-1 Recommended update for boost-legacy

This update for boost-legacy fixes the following issues: Create a new boost-legacy package with version 1.66.0. bsc1175886, jscSLE-17304, jscECO-3147 - Remove duplicate license package that we get from original Boost - Add a backport of Boost.Optional::hasvalue for LibreOffice - Use %license...

5CVSS6.6AI score0.02686EPSS
SaveExploits1References25
OSV
OSV
added 2020/01/13 3:17 p.m.7 views

OPENSUSE-SU-2020:0014-1 Security update for php7-imagick

This update for php7-imagick fixes the following issues: Upgrade to version 3.4.4: Added: function Imagick::optimizeImageTransparency METRICSTRUCTURALSIMILARITYERROR METRICSTRUCTURALDISSIMILARITYERROR COMPRESSIONZSTD - https://github.com/facebook/zstd COMPRESSIONWEBP CHANNELCOMPOSITEMASK...

9.8CVSS9.6AI score0.01874EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/07/29 12:08 a.m.27 views

Side-channel Attack

openjdk is vulnerable to side-channel attack. An unknown difficult to exploit vulnerability allows an unauthenticated attacker with access to gain unauthorizaed access to critical system resources due to security risks arising from using deprecated functions within Elliptic Curve EC cryptography...

5.1CVSS3.7AI score0.0046EPSS
SaveExploits0References9Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/05/16 12:00 a.m.26 views

Fedora 30 : php-pecl-imagick (2019-488d0f9a4b)

Version 3.4.4 - The 3.4.4 release is intended to be the last release other than small bug fixes that will support either PHP 5.x, or ImageMagick 6.x. The next planned release will be PHP 7.0 and ImageMagick 7.0 at least, if not higher. - Added: - function Imagick::optimizeImageTransparency -...

9.8CVSS7AI score0.01874EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/16 12:00 a.m.33 views

Fedora 28 : php-pecl-imagick (2019-9448fa46f3)

Version 3.4.4 - The 3.4.4 release is intended to be the last release other than small bug fixes that will support either PHP 5.x, or ImageMagick 6.x. The next planned release will be PHP 7.0 and ImageMagick 7.0 at least, if not higher. - Added: - function Imagick::optimizeImageTransparency -...

9.8CVSS7AI score0.01874EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:00 a.m.19 views

Fedora 28 : php-Smarty2 (2018-2d2739ebed)

2017-11-03 - replace functions deprecated in PHP 7.2 2016-09-11 Uwe Tews - math fix parameter checking order to avoid misleading message - math replace wrong versiom 2016-07-19 Uwe Tews - math shell injection vulnerability patch provided by Tim Weber 2015-12-30 Uwe Tews - fixed plugin filepath...

5.6AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/09/26 12:00 a.m.15 views

SugarCRM Multiple Vulnerabilities (Jun 2017)

SugarCRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sugarcrm:sugarcrm"; if description...

7.3AI score
SaveExploits0References2
curl security advisories
curl security advisories
added 2016/12/21 8:00 a.m.13 views

printf floating point buffer overflow

libcurl's implementation of the printf functions triggers a buffer overflow when doing a large floating point output. The bug occurs when the conversion outputs more than 255 bytes. The flaw happens because the floating point conversion is using system functions without the correct boundary check...

8.1CVSS7.1AI score0.04768EPSS
SaveExploits0Affected Software2
OSV
OSV
added 2016/12/21 8:00 a.m.12 views

CURL-CVE-2016-9586 printf floating point buffer overflow

libcurl's implementation of the printf functions triggers a buffer overflow when doing a large floating point output. The bug occurs when the conversion outputs more than 255 bytes. The flaw happens because the floating point conversion is using system functions without the correct boundary check...

8.1CVSS8.2AI score0.04768EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2015/02/06 12:59 p.m.12 views

Ghost glibc Vulnerability Affects Enterprise Applications

What drove IT admins crazy about the Bash vulnerability was that it was difficult to determine—and patch—everything that was making a Bash call. It was everywhere. Apparently, some of that angst applies to the Ghost vulnerability in the GNU C library, known as glibc. At first, experts believed th...

SaveExploits0References3
zdt
zdt
added 2013/10/10 12:00 a.m.87 views

Uebimiau 2.7.11 Cross Site Scripting Vulnerability

Uebimiau versions 2.7.11 and below suffer from open redirect and cross site scripting vulnerabilities. ============================================= INTERNET SECURITY AUDITORS ALERT 2013-008 - Original release date: March 15th, 2013 - Last revised: March 20th, 2013 - Discovered by: Manuel Garcia...

6.3AI score0.10692EPSS
SaveExploits8
Rows per page
Query Builder