Gentoo net-im/jabberd2 elevation of privilege vulnerability

The Gentoo net-im/jabberd2 package is an XMPP Extensible Message Processing Field Protocol package from the Gentoo Foundation. A security vulnerability exists in the Gentoo net-im/jabberd2 package version 2.6.1 and earlier. A local attacker can exploit the vulnerability to terminate arbitrary...

Newsbeuter: User-assisted execution of arbitrary code

Background Newsbeuter is a RSS/Atom feed reader for the text console. Description Newsbeuter does not properly escape shell meta-characters in an RSS item with a media enclosure in the podcast playback function of Podbeuter. Impact A remote attacker, by enticing a user to open a feed with a...

GLSA-201802-04 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201802-04 MySQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MySQL. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary code without...

GLSA-201802-05 : Ruby: Command injection

The remote host is affected by the vulnerability described in GLSA-201802-05 Ruby: Command injection A command injection flaw was discovered in Net::FTP which impacts Ruby. Impact : A remote attacker, by enticing a user to download and open a crafted file from a malicious FTP server, could execut...

GLSA-201801-20 : Fossil: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201801-20 Fossil: User-assisted execution of arbitrary code Fossil does not properly validate SSH sync protocol URLs. Impact : A remote attacker, by enticing a user to open a specially crafted URL, could possibly execute arbitrary...

GLSA-201801-17 : Poppler: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201801-17 Poppler: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Poppler. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to open a special...

GLSA-201801-15 : PolarSSL: Multiple vulnerabilities (SLOTH)

The remote host is affected by the vulnerability described in GLSA-201801-15 PolarSSL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PolarSSL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker might be able to execute arbitrary...

PolarSSL: Multiple vulnerabilities

Background PolarSSL is a cryptographic library for embedded systems. Description Multiple vulnerabilities have been discovered in PolarSSL. Please review the CVE identifiers referenced below for details. Impact A remote attacker might be able to execute arbitrary code, cause Denial of Service...

GLSA-201801-11 : PySAML2: Security bypass

The remote host is affected by the vulnerability described in GLSA-201801-11 PySAML2: Security bypass It was found that the PySAML2 relies on an assert statement to check the users password. A python optimizations might remove this assertion. Impact : A remote attacker could bypass security...

GLSA-201801-13 : TigerVNC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201801-13 TigerVNC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TigerVNC. Please review the referenced CVE Identifiers for details. Impact : An attacker could execute arbitrary code or cause a Denial ...

GLSA-201801-10 : LibXfont, LibXfont2: Arbitrary file access

The remote host is affected by the vulnerability described in GLSA-201801-10 LibXfont, LibXfont2: Arbitrary file access It was discovered that libXfont incorrectly followed symlinks when opening font files. Impact : A local unprivileged user could use this flaw to cause the X server to access...

GLSA-201801-05 : OpenSSH: Permission issue

The remote host is affected by the vulnerability described in GLSA-201801-05 OpenSSH: Permission issue The processopen function in sftp-server.c in OpenSSH did not properly prevent write operations in readonly mode. Impact : A remote attacker could cause the creation of zero-length files...

GLSA-201801-09 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201801-09 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebkitGTK+. Please review the referenced CVE Identifiers for details. Impact : An attacker, by enticing a user to visit maliciously...

GLSA-201801-07 : GNU Emacs: Command injection

The remote host is affected by the vulnerability described in GLSA-201801-07 GNU Emacs: Command injection A command injection flaw within the Emacs enriched mode handling has been discovered. Impact : A remote attacker, by enticing a user to open a specially crafted file, could execute arbitrary...

GLSA-201801-01 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201801-01 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE identifiers for details. Impact : A remote attacker, by enticing a user to compile/execute a...

GLSA-201712-02 : OpenCV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201712-02 OpenCV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenCV. Please review the referenced CVE identifiers for details. Impact : An attacker can cause a denial of service condition or conduct...

GLSA-201712-01 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201712-01 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : By enticing a victim to visit maliciously crafted web...

GLSA-201712-04 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201712-04 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition,...

GLSA-201711-14 : IcedTea: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-14 IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in IcedTea. Please review the referenced CVE identifiers for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-201711-13 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-13 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers and Adobe Security Bulletin for details. Impact : A remote...