DLA-1996-1 libapache2-mod-auth-openidc - security update

Bulletin has no description...

CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1160: Incorrect Permission Assignment for Critical Resource

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

PT-2019-6742

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue concerns a permission problem in Forum Subscriptions. Unenrolled users can subscribe or unsubscribe through the mod/forum/index.php endpoint, specifically the mod/forum/index.php API endpoin...

OPENSUSE-SU-2019:2499-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes bsc1153666. This update was imported from the SUSE:SLE-15-SP1:Update update project...

PT-2019-4786

Name of the Vulnerable Software and Affected Versions mod auth openidc versions prior to 2.4.0.1 Apache HTTP Server affected versions not specified Description A flaw exists related to open redirect issues in URLs with trailing slashes. There is also an issue with insufficient protection of web...

PT-2019-6859

Name of the Vulnerable Software and Affected Versions mod ruid2 versions prior to 0.9.8 Description The issue improperly handles file descriptors, allowing remote attackers to bypass security using a CGI script to break out of the chroot. Recommendations For mod ruid2 versions prior to 0.9.8,...

PT-2019-15676

Name of the Vulnerable Software and Affected Versions PopojiCMS version 2.0.1 Description The issue concerns a stored XSS vulnerability. It is related to the po-admin/route.php?mod=post&act=edit endpoint, where the post1content parameter is vulnerable. Recommendations For PopojiCMS version 2.0.1,...

ALPINE-CVE-2019-10092

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with...

DEBIAN-CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when modremoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted pro...

DEBIAN-CVE-2019-10098

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL...

ALPINE-CVE-2019-10098

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

CVE-2019-16518

The vulnerability CVE-2019-16518 affects Swell Kit Mod devices that use the Vandy Vape platform. The BLE handling of packets specifying large power/voltage values can cause an attacker to induce an unintended temperature in the user’s mouth/throat. Sources consistently describe this risk without ...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

PT-2019-14680

Name of the Vulnerable Software and Affected Versions Swell Kit Mod devices affected versions not specified Description An issue was discovered that allows an attacker to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets. These packets can...

CVE-2019-16518: Exposure of Resource to Wrong Sphere

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

The vulnerability of the mod_ssl module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modssl module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted request for re-negotiation of the TLS connection...