GLSA-202008-09 : Shadow: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202008-09 Shadow: Privilege escalation When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted. Impact : A local attacker could escalate privileges to root. Workaround : The...

GLSA-202008-02 : GNU GLOBAL: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202008-02 GNU GLOBAL: Arbitrary code execution A vulnerability was found in an undocumented function of gozilla. Impact : A remote attacker could entice a user to open a specially crafted URL using GNU GLOBAL, possibly resulting i...

GLSA-202008-04 : Apache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-04 Apache: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202008-06 : iproute2: Denial of service

The remote host is affected by the vulnerability described in GLSA-202008-06 iproute2: Denial of service iproute2 was found to contain a use-after-free in getnetnsidfromname in ip/ipnetns.c. Impact : A remote attacker, able to feed iproute2 crafted data, may be able to cause a Denial of Service...

GLSA-202008-01 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-01 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-64 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-64 Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CV...

GLSA-202007-53 : Dropbear: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-53 Dropbear: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-10 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-10 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202007-50 : GLib Networking: Improper certificate validation

The remote host is affected by the vulnerability described in GLSA-202007-50 GLib Networking: Improper certificate validation GTlsClientConnection skips hostname verification of the servers TLS certificate if the application fails to specify the expected server identity. Impact : There may be a...

GLSA-202007-18 : QtNetwork: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-18 QtNetwork: Denial of service A flaw was discovered in QtNetworks handling of OpenSSL protocol errors. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known workaround at...

GLSA-202007-44 : FreeXL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-44 FreeXL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FreeXL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-27 : Haml: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-27 Haml: Arbitrary code execution It was discovered that Haml was not correctly filtering out special characters which may be used for attributes. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-202007-38 : QtGui: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-38 QtGui: Arbitrary code execution QtGuis setMarkdown has a use-after-free related to QTextMarkdownImporter::insertBlock. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, ...

GLSA-202007-43 : TRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-43 TRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TRE. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-29 : rssh: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-29 rssh: Multiple vulnerabilities Multiple vulnerabilities have been discovered in rssh. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-32 : Sarg: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-32 Sarg: Local privilege escalation A flaw in Sargs handling of temporary directories was discovered. Impact : A local attacker may be able to escalate privileges. Workaround : There is no known workaround at this time. C...

GLSA-202006-15 : OpenConnect: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-15 OpenConnect: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenConnect. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers fo...

GLSA-202006-09 : Adobe Flash Player: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202006-09 Adobe Flash Player: Arbitrary code execution An unspecified flaw has been discovered in Adobe Flash Player. Impact : This flaw can be exploited by attackers for remote code execution. Workaround : There is no known...

GLSA-202006-23 : Cyrus IMAP Server: Access restriction bypass

The remote host is affected by the vulnerability described in GLSA-202006-23 Cyrus IMAP Server: Access restriction bypass An issue was discovered in Cyrus IMAP Server where sieve script uploading is excessively trusted. Impact : A user can use a sieve script to create any mailbox with administrat...

GLSA-202006-06 : ssvnc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-06 ssvnc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ssvnc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...