RLSA-2019:1529 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Deps module contains fundamental packages required as dependencies for the pki-core module by Rocky Enterprise Software Foundation Certificate System. Security Fixes: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up...

SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2017:0855-1)

This update for nodejs4 fixes the following issues : - New upstream LTS release 4.7.3 The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 - No changes in LTS version 4.7.2 - New upstream LTS release 4.7.1 - build:...

CVE-2016-10563

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise...

Design/Logic Flaw

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise...

CVE-2016-10563

During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise...

CVE-2016-10563

CVE-2016-10563 concerns the go-ipfs-deps package, where versions before 0.4.4 download resources over HTTP. The root cause is insecure HTTP downloads that enable a MITM attacker to modify or read resources, compromising integrity and potentially enabling further impact, including remote code exec...

Microsoft Internet Explorer - mshtml.dll Remote Code Execution (MS17-007) Exploit

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution MS17-007 Google Dork: NA Date: 24/7/2017 Exploit Author: Mohamed Hamdy - Nsecurity Vendor Homepage: https://www.microsoft.com Version: Microsoft Internet Explor...

CVE-2 0 1 3-3 8 9 7 sample analysis study notes-vulnerability warning-the black bar safety net

Before, see FireEye on the CVE-2 0 1 3-3 8 9 3 analysis, see Use way relatively similar, the thought is the same, the analysis of learning, discovery led to the question of object is inconsistent, it does not use the ms-help load the office of hxdl structure of the ROP, and later in the BinVul on...

Security Release: Symfony 2.0.17 released

Symfony 2.0.17 has just been released. This release contains several security fixes related to the way XML is handled, and as such, we recommend everyone to upgrade. These issues have been reported by Pádraic Brady from the Zend Framework team; I would like to thank him for the very detailed repo...

Security Release: Symfony 2.0.6

Symfony 2.0.6 has just been released. It addresses a security vulnerability in the EntityUserProvider as provided in the Doctrine bridge. If you let your users update their login/username from a form, and if you are using Doctrine as a user provider, then you are vulnerable and you should upgrade...

Mandriva Update for nulog MDVA-2010:097 (nulog)

Check for the Version of nulog OpenVAS Vulnerability Test Mandriva Update for nulog MDVA-2010:097 nulog Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Core 11 FEDORA-2009-6972 (poppler)

The remote host is missing an update to poppler announced via advisory FEDORA-2009-6972. OpenVAS Vulnerability Test $Id: fcore20096972.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6972 poppler Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 8 : emacspeak-28.0-3.fc8 (2008-8423)

Fri Sep 26 2008 Jens Petersen - 28.0-3 - CVE-2008-4191 fix tmpfile vulnerability in extract-table.pl with emacspeak-28.0-tmpfile.patch from upstream svn 463819 - Fri Sep 26 2008 Jens Petersen - 28.0-2 - fix broken generated deps reported by mtasaka 463899 - script the replacement of tcl with...

kdegraphics security update

7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...