5887 matches found
CVE-2013-3703
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data...
CVE-2013-3703 No write permission check in change_role command
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data...
[SECURITY] Fedora 27 Update: kernel-4.16.13-200.fc27
The kernel meta package...
CVE-2016-10569
embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...
CVE-2016-10569
embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the...
CVE-2016-10569
The CVE-2016-10569 issue affects the embedza module prior to version 1.2.4, where JavaScript resources are downloaded over HTTP. This enables a man-in-the-middle scenario where an attacker on the network could swap the requested JavaScript with a malicious file, potentially leading to remote code...
[SECURITY] Fedora 28 Update: kernel-4.16.12-300.fc28
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.16.11-100.fc26
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.16.11-300.fc28
The kernel meta package...
[SECURITY] Fedora 28 Update: kernel-4.16.8-300.fc28
The kernel meta package...
[SECURITY] Fedora 26 Update: kernel-4.16.7-100.fc26
The kernel meta package...
gruene-bergstrasse.de XSS vulnerability
Open Bug Bounty ID: OBB-610349 Description| Value ---|--- Affected Website:| gruene-bergstrasse.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
[SECURITY] Fedora 27 Update: kernel-4.16.4-200.fc27
The kernel meta package...
Mail.ru: api.icq.com / возможность смотреть аватарку и название приватного чата
It was possible to manipulate chat ID in forward message to get meta-data chat name of private group chat...
[SECURITY] Fedora 28 Update: tika-1.17-1.fc28
The Apache Tika toolkit detects and extracts meta-data and structured text content from various documents using existing parser libraries...
Buffer overflow
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, and SDX20, when reading CDT from eMMC...
[SECURITY] Fedora 26 Update: kernel-4.15.17-200.fc26
The kernel meta package...
[SECURITY] Fedora 27 Update: kernel-4.15.12-301.fc27
The kernel meta package...