4862 matches found
[SECURITY] Fedora 28 Update: kernel-4.17.2-200.fc28
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.16.16-300.fc28
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.16.15-200.fc27
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.16.15-300.fc28
The kernel meta package...
Ubuntu: Security Advisory (USN-3677-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-5118
The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the...
CVE-2017-7837
SVG loaded through "" tags can use "" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox 57...
Code injection
SVG loaded through "" tags can use "" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox 57...
Code injection
The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the...
CVE-2017-7837
CVE-2017-7837 affects Mozilla Firefox up to version 57 (pre-57). SVG data loaded via an tag can use embedded tags to set cookies for that page. This is described in the mfsa2017-24 advisory and related CVEs; no exploit details are provided in the sources. Remediation: upgrade to Firefox 57 or n...
CVE-2013-3703
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data...
CVE-2013-3703 No write permission check in change_role command
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data...
[SECURITY] Fedora 27 Update: kernel-4.16.13-200.fc27
The kernel meta package...
CVE-2016-10569
embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...
CVE-2016-10569
The CVE-2016-10569 issue affects the embedza module prior to version 1.2.4, where JavaScript resources are downloaded over HTTP. This enables a man-in-the-middle scenario where an attacker on the network could swap the requested JavaScript with a malicious file, potentially leading to remote code...
CVE-2016-10569
embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...
[SECURITY] Fedora 28 Update: kernel-4.16.12-300.fc28
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.16.11-100.fc26
The kernel meta package...