Fedora 30 : phpMyAdmin (2019-8f55b515f1)

Upstream announcement : phpMyAdmin 4.9.2 is released 2019-11-22 Welcome to phpMyAdmin 4.9.2, a bugfix release that also contains a security fix. This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an...

The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, allows attackers to exploit their privileges.

The vulnerability of the Windows Data Sharing Service, a component of the Windows operating system, is related to errors in file handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the mod_auth_digest component in the Apache HTTP Server allows a hacker to bypass authentication by using a different username.

The vulnerability of the modauthdigest component in the Apache HTTP Server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to perform authentication using a different username...

A vulnerability in the isolation function of websites arises when using Blob URLs and the Google Chrome browser. This allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the isolation functionality of websites, which arises when using Blob URLs and the Google Chrome browser, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

The vulnerability of the ReadableStreams component in Google Chrome’s Blink web page rendering mechanism allows a hacker to execute arbitrary code.

The vulnerability of the ReadableStreams component in Google Chrome’s Blink web rendering engine is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of the Apache Tomcat application server arises from synchronization errors when using a shared resource, allowing attackers to expose sensitive information.

The vulnerability of the Apache Tomcat application server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to disclose sensitive information remotely...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially crafted web page...

The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Win32k component in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

The vulnerability of the Firefox browser’s Reader View function, which allows a hacker to execute arbitrary code.

The vulnerability of the Firefox Browser’s Reader View function is related to errors in processing cookie files with the SameSite attribute. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome arises from synchronization errors when using a common resource, allowing a perpetrator to replace the content of the Omnibox component (URL).

The vulnerability of Google Chrome arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to replace the content of the Omnibox component URL by using a specially created HTML page...

Pegasystem PEGA Platform Information Disclosure Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An information disclosure vulnerabili...

USN-4200-1 redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

USN-4200-1: Redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2019:3060-1)

This update for libpng16 fixes the following issues : Security issues fixed : CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493. No...

Ubuntu: Security Advisory (USN-4200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Security component in the Symfony software development and web application management platform allows attackers to escalate their privileges.

The vulnerability of the Security component in the Symfony software development and web application management framework is related to session management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) is related to authentication errors, allowing attackers to escalate their privileges.

The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...