571 matches found
CentOS 7 : mailman (RHSA-2020:1054)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1054 advisory. - Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via...
CVE-2020-11655
SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...
CVE-2020-11655
SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...
CVE-2020-11655
SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...
CVE-2018-19824
A flaw was found In the Linux kernel, through version 4.19.6, where a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled in usbaudioprobe in sound/usb/card.c. An attacker could corrupt memory and possibly...
mailman security update
CentOS Errata and Security Advisory CESA-2020:1054 An update for mailman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2020-11111
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions a...
EulerOS Virtualization for ARM 64 3.0.6.0 : cyrus-sasl (EulerOS-SA-2020-1336)
According to the version of the cyrus-sasl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This...
EulerOS Virtualization for ARM 64 3.0.6.0 : patch (EulerOS-SA-2020-1335)
According to the version of the patch package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects...
RHEL 7 : mailman (RHSA-2020:1054)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1054 advisory. Mailman is a program used to help manage e-mail discussion lists. Security Fixes: mailman: Cross-site scripting vulnerability allows malicio...
CVE-2020-9385
A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...
danfruehauf NetworkManager-ssh elevation of privilege vulnerability
NetworkManager-ssh is NetworkManager's SSH VPN integration. An elevation of privilege vulnerability exists in danfruehauf NetworkManager-ssh versions prior to 1.2.11. The vulnerability stems from mishandling of other options. No detailed vulnerability details are provided at this time...
CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
Privilege escalation
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
UBUNTU-CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
CVE-2020-9355
NetworkManager-ssh (the plugin for NetworkManager) is affected by CVE-2020-9355. Vulnerable component: network-manager-ssh before 1.2.11; root cause is mishandling of extra SSH options, enabling privilege escalation by a local user who can modify a connection. Impact per sources: local privilege ...
CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
Code injection
meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code execution or denial of service by creating a gaming server with a crafted map, and inviting a victim to this server. A GetValue call is mishandled...