7642 matches found
EQGRP
This is a repository containing the decrypted content of eqgrp-auction-file.tar.xz. The repository includes three files: Linux/bin/7z, Linux/bin/7z.so, and Linux/bin/7za. These files are likely related to the 7-Zip file archiver. The files are in ELF Executable and Linkable Format format, which i...
Microsoft Media Foundation Memory Corruption Vulnerability
Media Foundation is a new generation of multimedia application libraries introduced by Microsoft on Windows Vista, aiming to provide a unified multimedia audio and video solution for the Windows platform. Developers can use Media Foundation to play video or sound files, transcode multimedia file...
christchurchcitylibraries.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1187014 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
@bakjs/graphql (>=2.0.0 <=2.2.0), @clevyr/pavo-hapi-graphql (>=0.0.1 <=0.0.5) +14 more potentially affected by unknown CVE via apollo-server-hapi (>=1.2.0 <=1.4.0)
apollo-server-hapi NPM version =1.2.0, =2.0.0, =0.0.1, =0.1.0, =1.0.0, =0.0.51, =3.0.0, =1.0.2, =1.0.1, =0.2.2, =0.2.37 - trailpack-apollo =3.0.0-alpha.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W42G-7VFC-XF37...
ai.eto:rikai_2.12 (>=0.0.2 <=0.0.12), at.willhaben.willtest:core (=3.1.1) +774 more potentially affected by CVE-2020-9488 via org.apache.logging.log4j:log4j-core (>=2.13.0 <=2.13.1)
org.apache.logging.log4j:log4j-core MAVEN version =2.13.0, =0.0.2, =2.0, =1.4.5, =1.4.5, =1.4.6, =00.01.02, =00.00.01, =00.02.29, =01.01.05 and more Source cves: CVE-2020-9488 Source advisory: OSV:GHSA-VWQQ-5VRC-XW9H...
[SECURITY] Fedora 32 Update: gjs-1.64.3-2.fc32
Gjs allows using GNOME libraries from Javascript. It's based on the Spidermonkey Javascript engine from Mozilla and the GObject introspection framework...
CVE-2020-11091
In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and thereby insert themselves as a fake service. In a cluster with an IPv4 internal network, if IPv6 is not totally disabled on the host via ipv6.disable=1 ...
Dotnetnuke 3.1.x < 9.6.0 / 5.0.x < 9.6.0 / 6.0.x < 9.6.0 / 7.0.x < 9.6.0 Multiple Vulnerabilities (09.06.00)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is 3.1.x prior to 9.6.0, 5.0.x prior to 9.6.0, 6.0.x prior to 9.6.0, or 7.0.x prior to 9.6.0. It is, therefore, affected by multiple vulnerabilities. - Modules that were discarded to the recycle bi...
[SECURITY] Fedora 32 Update: dpdk-19.11.1-2.fc32
The Data Plane Development Kit is a set of libraries and drivers for fast packet processing in the user space...
[SECURITY] Fedora 32 Update: python3-3.8.3-1.fc32
Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...
The vulnerability of the libjasper.a file, a collection of JasPer libraries, allows attackers to trigger a service failure.
The vulnerability of the libjasper.a file base/jasmalloc.c in the JasPer library set is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
HTTP Suspicious Linux Usr Paths
Linux sub-directory usr contains user binaries, their documentation, libraries, header files, and its supporting libraries. A remote attacker may create a malicious HTTP request to obtain sensitive information...
Security update for gcc9 (moderate)
openSUSE Security Update: Security update for gcc9 Announcement ID: openSUSE-SU-2020:0716-1 Rating: moderate References: 1114592 1135254 1141897 1142649 1142654 1148517 1149145 1149995 1152590 1167898 Cross-References: CVE-2019-14250 CVE-2019-15847 Affected Products: openSUSE Leap 15.1 An update...
OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)
A flaw was found in the way the readObject method of the MethodType class in the Libraries component of OpenJDK checked argument types. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions...
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)
A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...
OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)
Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...
OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)
A flaw was found in the way the readObject method of the MethodType class in the Libraries component of OpenJDK checked argument types. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions...
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)
A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)
A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...
OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)
A flaw was found in the way the readObject method of the MethodType class in the Libraries component of OpenJDK checked argument types. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions...