4654 matches found
ImageMagick coders/meta.c file memory leak vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'parse8BIMW' and 'format8BIM' functions of the coders/meta.c file in...
[SECURITY] Fedora 25 Update: kernel-4.11.12-200.fc25
The kernel meta package...
acacias-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-269733 Description| Value ---|--- Affected Website:| acacias-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[SECURITY] Fedora 26 Update: kernel-4.11.11-300.fc26
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.11.10-100.fc24
The kernel meta package...
WakaTime: Missing filteration of meta characters in all full name field on wakatime.com
Hi there Vulnerability Title: Meta characters are not filtered into full name Description You haven't filtered control meta characters such as %00 etc in full name field which allows an attacker to impersonate or hide their real identity within the application. This one is not rejected. It turns...
[SECURITY] Fedora 26 Update: kernel-4.11.6-301.fc26
The kernel meta package...
[SECURITY] Fedora 25 Update: kernel-4.11.6-201.fc25
The kernel meta package...
[SECURITY] Fedora 24 Update: kernel-4.11.6-101.fc24
The kernel meta package...
CVE-2017-9731
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...
Code injection
In meta/classes/packageipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package...
CVE-2017-9731
The CVE-2017-9731 entry concerns the Yocto Project/Poky component: meta/classes/package_ipk.bbclass (Poky-Pyro 17.0.0 for Yocto through YP Core - Pyro 2.3). The issue enables information disclosure by allowing attackers to read a URL from a Source entry in an ipk package, exposing sensitive data....
[SECURITY] Fedora 24 Update: kernel-4.11.4-100.fc24
The kernel meta package...
sanjuanito-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-247036 Description| Value ---|--- Affected Website:| sanjuanito-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
eldorado-meta.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-246978 Description| Value ---|--- Affected Website:| eldorado-meta.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SUSE-SU-2017:1479-1 Security update for ceph
This update provides Ceph 10.2.6, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. bsc1014986 These non-security issues were fixed: - common: Add rdbmap to ceph-common. bsc1029482 -...
WordPress < 4.7.5 Multiple Vulnerabilities
Binary data 700121.prm...
CVE-2017-9062
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API...