8204 matches found
[SECURITY] Fedora 30 Update: ansible-2.8.1-1.fc30
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 29 Update: ansible-2.8.1-1.fc29
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
CVE-2019-12874: Double Free
An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to exploit the memory content of processes.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access the memory contents of processes using a specially crafted web page or...
CVE-2019-12149
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...
Partial Physical Address Leakage Vulnerability - US
Lenovo Security Advisory: LEN-27842 Potential Impact: Information disclosure Severity: Low Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0174 Summary Description: A potential security vulnerability in some microprocessors may allow partial information disclosure via local access. This...
Partial Physical Address Leakage Vulnerability - Lenovo Support US
No description provided...
Fedora Update for drupal7-ds FEDORA-2019-5258ea8ae2
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for drupal7-context FEDORA-2019-62eba285ee
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-9883
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...
Cross site request forgery (csrf)
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...
[SECURITY] Fedora 29 Update: drupal7-views-3.23-1.fc29
You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...
[SECURITY] Fedora 29 Update: drupal7-context-3.10-1.fc29
Context allows you to manage contextual conditions and reactions for differ ent portions of your site. You can think of each context as representing a "sec tion" of your site. For each context, you can choose the conditions that trigger this context to be active and choose different aspects of...
[SECURITY] Fedora 30 Update: drupal7-xmlsitemap-2.6-1.fc30
The XML sitemap module creates a sitemap that conforms to the sitemaps.org specification 1. This helps search engines to more intelligently crawl a website and keep their results up to date. The sitemap created by the module can be automatically submitted to Ask, Google, Bing formerly Windows Liv...
CVE-2016-8898
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
PT-2019-7550
Name of the Vulnerable Software and Affected Versions Vtiger CRM version 6.5.0 Description The issue allows SQL injection via the contactidlist parameter in the modules/Calendar/Activity.php file. Recommendations For Vtiger CRM version 6.5.0, avoid using the contactidlist parameter in the affecte...
PT-2019-7552
Name of the Vulnerable Software and Affected Versions Kliqqi version 3.0.0.5 Description The issue allows for CSRF with resultant Arbitrary File Upload. This is possible because the "module.php?module=upload" endpoint can be used to configure the uploading of .php files, and then the...
CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
CVE-2016-8898: Improper Neutralization of Special Elements used in an SQL Command
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
