Security update for rmt-server (important)

openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2020:0235-1 Rating: important References: 1141122 1157119 1160673 1160922 Cross-References: CVE-2019-18904 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has three fixes is now...

Vanilla Forums Information Disclosure Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . An information disclosure vulnerability exists in Vanilla Forums versions prior to 2.0.17.9. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An...

Denial of Service

Overview Versions of @hapi/accept prior to 3.2.4 or 5.0.1 are vulnerable to Denial of Service. The Accept-Encoding HTTP header parser has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. Because hapi rethrows system errors as oppose...

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880...

go-toolset:ol8 security update

go-toolset 1.12.12-1 - Update for golang package fixes 1.12.12-1 - Bump version to 1.12.12 golang 1.12.12-4.0.1 - from upstream https://github.com/golang/go/issues/2775 - move arbitrary value 10% to 15% for GC tests, hits 10.48% on our - infrastructure - Resolves failing post build tests Orabug:...

The vulnerability of the FTP file transfer protocol in Firefox browsers allows a hacker to induce a service failure.

The vulnerability of the FTP file transfer protocol in Firefox browsers is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Firefox browsers, related to errors in permission settings, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of Firefox browsers is related to errors in permission settings. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...

The vulnerability of the SAP Mobile Platform SDK, related to resource management errors, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP Mobile Platform SDK, a software development platform, is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

Information disclosure

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3759

Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3759

Adobe Digital Editions (Windows): CVE-2020-3759 is a buffer overflow (buffer errors) vulnerability in versions 4.5.10 and earlier that could disclose information; CVE-2020-3760 is a command-injection flaw in the same pre-4.5.11 range that could allow arbitrary code execution. The issues are addre...

Apache NiFi Information Disclosure Vulnerability (CNVD-2020-04924)

Apache NiFi is a data-flow based data processing and distribution system of the Apache Apache Software Foundation, USA. The system supports the configuration and transformation of data routing indicator maps and system intermediary logic. An information disclosure vulnerability exists in Apache...

Apache Superset Information Disclosure Vulnerability

Apache Superset is an enterprise-class business intelligence Web application from the Apache Apache Software Foundation in the United States. The program includes features such as mutual data visualization and enterprise-level authentication. An information disclosure vulnerability exists in Apac...

Adobe Addresses Critical Flash, Framemaker Flaws

Adobe has released patches addressing a wave of critical flaws in its Framemaker and Flash Player products, which, if exploited, could lead to arbitrary code-execution. Overall, Adobe stomped out flaws tied to 42 CVEs for its regularly scheduled February updates, with 35 of those flaws being...

Description of the security update for Excel 2016: February 11, 2020

None None...

Description of the security update for SharePoint Server 2019: February 11, 2020

None None...

CVE-2014-0147

CVE-2014-0147 affects QEMU before 1.6.2, where a logic error with signed data types during QCOW2 snapshot creation (impacting QCOW2 and disk image formats used by Bochs) can cause a crash by incorrectly calling update_refcount(). Root cause is a signed data type/logical error in snapshot handling...

The vulnerability of the ajaxArchiveFiles.php component, a utility for managing the configuration of rConfig network devices, allows an attacker to execute arbitrary commands on the target system.

The vulnerability of the ajaxArchiveFiles.php component, a utility for managing the configuration of rConfig network devices, is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by sending...