GLSA-202007-25 : arpwatch: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-25 arpwatch: Root privilege escalation It was discovered that Gentoos arpwatch ebuild made excessive permission operations on its data directories, possibly changing ownership of unintended files. This only affects OpenRC...

GLSA-202007-14 : yaml-cpp: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-14 yaml-cpp: Denial of service The function Scanner::peek in scanner.cpp may have an assertion failure. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known workaround at...

GLSA-202007-37 : AWStats: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-37 AWStats: Multiple vulnerabilities Multiple vulnerabilities have been discovered in AWStats. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202007-10 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-10 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202007-05 : libexif: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-05 libexif: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libexif. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202007-50 : GLib Networking: Improper certificate validation

The remote host is affected by the vulnerability described in GLSA-202007-50 GLib Networking: Improper certificate validation GTlsClientConnection skips hostname verification of the servers TLS certificate if the application fails to specify the expected server identity. Impact : There may be a...

GLSA-202007-13 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-13 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

rssh: Multiple vulnerabilities

Background rssh is a restricted shell, allowing only a few commands like scp or sftp. It is often used as a complement to OpenSSH to provide limited access to users. Description Multiple vulnerabilities have been discovered in rssh. Please review the CVE identifiers referenced below for details...

GLSA-202007-16 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-16 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-11 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-11 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-35 : ReportLab: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-35 ReportLab: Arbitrary code execution ReportLab was found to be mishandling XML documents and may evaluate the contents without checking for their safety. Impact : A remote attacker could possibly execute arbitrary code wi...

GLSA-202007-51 : FileZilla: Untrusted search path

The remote host is affected by the vulnerability described in GLSA-202007-51 FileZilla: Untrusted search path It was discovered that FileZilla uses an untrusted search path. Impact : An attacker could use a malicious binary to escalate privileges. Workaround : There is no known workaround at this...

GLSA-202007-39 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-39 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-22 : sysstat: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-22 sysstat: Arbitrary code execution A double-free in sysstats checkfileactlst function was discovered. Impact : A local attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of...

GLSA-202007-27 : Haml: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-27 Haml: Arbitrary code execution It was discovered that Haml was not correctly filtering out special characters which may be used for attributes. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-202007-38 : QtGui: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202007-38 QtGui: Arbitrary code execution QtGuis setMarkdown has a use-after-free related to QTextMarkdownImporter::insertBlock. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, ...

GLSA-202007-17 : JHead: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-17 JHead: Multiple vulnerabilities Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-40 : Thin: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-40 Thin: Privilege escalation It was discovered that Gentoos Thin ebuild does not properly handle its temporary runtime directories. This only affects OpenRC systems, as the flaw was exploitable via the init script. Impact ...

GLSA-202007-02 : Xen: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-02 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-43 : TRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-43 TRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TRE. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...