Security fix for the ALT Linux 10 package firefox-esr version 68.1.0-alt1

Sept. 4, 2019 Andrey Cherepanov 68.1.0-alt1 - New ESR version 68.1.0. - Fixed: + CVE-2019-11751 Malicious code execution through command line parameters + CVE-2019-11746 Use-after-free while manipulating video + CVE-2019-11744 XSS by breaking out of title and textarea elements using innerHTML +...

DEBIAN-CVE-2019-15551

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...

PT-2019-4479 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.9 Description: The issue is related to a use-after-free bug in the Linux kernel, specifically in the drivers/usb/misc/yurex.c driver. This bug can be triggered by a malicious USB device, potentially allowing...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

PYSEC-2019-256

In libwebp 0.5.1, there is a double free bug in libwebpmux...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

Double free

In libwebp 0.5.1, there is a double free bug in libwebpmux...

CVE-2016-9969

In libwebp 0.5.1, there is a double free bug in libwebpmux...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1511)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A null pointer dereference in dccpwritexmit function in net/dccp/output.c in the Linux kernel allows a local user to cause a deni...

Firefox and Edge Fall to Hackers on Day Two of Pwn2Own

Hackers took down the Mozilla Firefox and Microsoft Edge browsers on Thursday at Pwn2Own, the annual hacking conference held in tandem with CanSecWest, as the competition continued for a second day. The dynamic hacking duo of Amat Cama and Richard Zhu, which make up team Fluoroacetate, had anothe...

openSUSE: Security Advisory for lua53 (openSUSE-SU-2019:0175-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2019:0247-1 Security update for lua53

This update for lua53 fixes the following issues: Security issue fixed: - CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043...

SUSE SLED15 / SLES15 Security Update : lua53 (SUSE-SU-2019:0247-1)

This update for lua53 fixes the following issues : Security issue fixed : CVE-2019-6706: Fixed a use-after-free bug in the luaupvaluejoin function of lapi.c bsc1123043 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

Microsoft Edge Chakra JIT Use-After-Free / Flag Issue

Microsoft Edge: Chakra: JIT: JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode just clears DisableImplicitFlags CVE-2019-0568 The JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode method is used to execute JsBuiltIn.js which initializes some builtin objects...

Denial Of Service (DoS)

libarchive.so is vulnerable to denial of service. A double free bug is triggered when an attacker submits a malicious file to the function parsecodes with newsize = 0 in libarchive/archivereadsupportformatrar.c, causing the process to crash...

Remote Code Execution (RCE)

microsoft.chakracore is vulnerable to remote code execution. This is due to a use-after-free bug where ServerScriptContext is freed before being unregistered, which would allow an attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from...

Information Disclosure

Microsoft Chakracore is vulnerable to information disclosure. This is due to a use-after-free UAF bug when accessing a local Javascript String buffer, which allows an attacker to obtain sensitive information to perform further attacks against the system...

OpenSLP 2.0.0 - Multiple Vulnerabilities

OpenSLP 2.0.0 - Multiple Vulnerabilities / | | | / / | . | . | -| | -| | . | ||/ || |||||| | || || 2018-11-07 MORE BUGS IN OPENSLP-2.0.0 ========================== I discovered some bugs in openslp-2.0.0 back in January, 2018. One of them I disclosed in June...

[SECURITY] [DLA 1567-1] gthumb security update

Package : gthumb Version : 3:3.3.1-2.1+deb8u1 CVE ID : CVE-2018-18718 Debian Bug : 912290 CVE-2018-18718 - CWE-415: Double Free The product calls free twice on the same memory address, potentially leading to modification of unexpected memory locations. There is a suspected double-free bug with...

prieuredesmourgues.com XSS vulnerability

Open Bug Bounty ID: OBB-688532 Description| Value ---|--- Affected Website:| prieuredesmourgues.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...