Debian: Security Advisory (DSA-4444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4443-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4444-1 : linux - security update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

Multiple researchers have discovered vulnerabilities in the way the Intel processor designs have implemented speculative forwarding of data filled into temporary microarchitectural structures buffers. This flaw could allow an attacker controlling an unprivileged process to read sensitive...

Debian DSA-4446-1 : lemonldap-ng - security update

It was discovered that the Lemonldap::NG web SSO system performed insufficient validation of session tokens if the 'tokenUseGlobalStorage'option is enabled, which could grant users with access to the main session database access to an anonymous session. C Tenable Network Security, Inc. The...

Debian DSA-4445-1 : drupal7 - security update

It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-007. C...

EulerOS Virtualization 3.0.1.0 : openssl (EulerOS-SA-2019-1546)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigat...

Debian DSA-4441-1 : symfony - security update

Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution. C Tenable Network Security, Inc. The...

Debian DSA-4439-1 : postgresql-9.6 - security update

Dean Rasheed discovered that row security policies in the PostgreSQL database system could be bypassed. For additional information please refer to the upstream announcement at https://www.postgresql.org/about/news/1939/ C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-4440-1 : bind9 - security update

Multiple vulnerabilities were found in the BIND DNS server : - CVE-2018-5743 Connection limits were incorrectly enforced. - CVE-2018-5745 The 'managed-keys' feature was susceptible to denial of service by triggering an assert. - CVE-2019-6465 ACLs for zone transfers were incorrectly enforced for...

Specher+Schuh DSA 4/2 (CCA-DNY41R) 5.001 General Purpose Discrete I/O

Binary data 754830.prm...

Rockwell Automation DSA 4/2 (100-DNY42S) 22.5 mm General Purpose Discrete I/O

Binary data 752740.prm...

Specher+Schuh DSA 4/2 (CCA-DNY42S) 5.001 General Purpose Discrete I/O

Binary data 754832.prm...

Rockwell Automation DSA 2/1 (100-DNY22R) 22.5 mm General Purpose Discrete I/O

Binary data 752739.prm...

Rockwell Automation Modular DSA 198-DNG Communication Adapter

Binary data 752925.prm...

Rockwell Automation DSA 2/1 (100-DNY22S) 22.5 mm General Purpose Discrete I/O

Binary data 752741.prm...

Rockwell Automation DSA 2/1 (100-DNY21R) 22.5 mm General Purpose Discrete I/O

Binary data 752737.prm...

Debian DSA-4438-1 : atftp - security update

Denis Andzakovic discovered two vulnerabilities in atftp, the advanced TFTP server which could result in denial of service by sending malformed packets. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4438. T...

Rockwell Automation DSA 4/2 (100-DNY42R) 22.5 mm General Purpose Discrete I/O

Binary data 752738.prm...

Rockwell Automation Modular DSA 198-DN Communication Adapter

Binary data 752903.prm...

Unauthenticated Access

Java SE and Java SE Embedded are vulnerable to unauthenticated access attacks. A remote user can exploit a flaw in the DSA implementation in the Libraries component of OpenJDK. The attacker may then be able to modify data on the target system and gain elevated privileges...