2807 matches found
openSUSE Security Update : python-python-gnupg (openSUSE-2019-478)
This update for python-python-gnupg to version 0.4.3 fixes the following issues : The following security vulnerabilities were addressed : - Sanitize diagnostic output of the original file name in verbose mode CVE-2018-12020 boo1096745 The following other changes were made : - Add --no-verbose to...
Information Disclosure
logstash-core is vulnerable to information disclosure attacks. The vulnerability exists when a malformed URI is used, and credentials can be logged in error messages, causing information disclosure attacks...
CVE-2019-9644
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
CVE-2019-9644
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
CVE-2019-9644
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
CVE-2019-9644
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
CVE-2018-1950
IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430...
ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2019-04686)
ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. A cross-site scripting vulnerability exists in the build of SQL-ERR messages in the includes/database.php file of ZoneMinder versions prior to 1.32.3, which can be exploited b...
UBUNTU-CVE-2019-8425
includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages...
DEBIAN-CVE-2019-8425
includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages...
Microsoft Dynamics 365 (online and on-premises) Update 8.2.3
None None...
High Disk Space Usage on Citrix ADM Causes MAS GUI Inaccessibility
High Disk space usage on Citrix ADM Unable to login to the ADM through GUI / CLI. df -h output shows close to 100% Disk utilization. 150GB of disk space was consumed by /var/mps/dbpgsql/data/pglog. The DB log file indicates thatlot of error messages related to MAS DB went Read-Replica mode. This...
Information Disclosure
PostgreSQL is vulnerable to information disclosure. An information leak occurs when the server handles certain error messages, allowing an authenticated database user could to obtain results of a query they did not have privileges to execute, by observing the constraint violation error messages...
Security Bulletin: Detailed Error Messages are Revealed in IBM Emptoris Supplier Lifecycle Management
Summary IBM Emptoris Supplier Lifecycle Management product reveals detailed error messages in certain features. Vulnerability Details CVEID: CVE-2018-1942 DESCRIPTION: IBM Emptoris Supplier Lifecycle Management could disclose highly sensitive information in detailed error messages. CVSS Base Scor...
Security update for Chromium (important)
This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed boo1118529: - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium - CVE-2018-18337: Us...
IBM Security Access Manager Information Disclosure Vulnerability (CNVD-2018-25399)
IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. An information disclosure vulnerability exists in IBM Security Access Manager...
Security Bulletin: Detailed Error Messages Vulnerability Affects IBM Emptoris Contract Management (CVE-2018-1961)
Summary IBM Emptoris Contract Management product reveals detailed error messages in certain features that might be vulnerable to attacks. Vulnerability Details CVEID: CVE-2018-1961 DESCRIPTION: IBM Emptoris Contract Management could disclose sensitive information from detailed information from...
Syhunt ScanTools 6.5 - Console Web Vulnerability Scan Tools
Syhunt ScanTools comes with four console applications: ScanURL, ScanCode, ScanLog and ScanConf, incorporating the functionality of the scanners Syhunt Dynamic, Syhunt Code, Syhunt Insight and Syhunt Harden respectively. Whether you want to scan a live web application, source code files, a GIT...