[SECURITY] Fedora 29 Update: ansible-2.8.1-1.fc29

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

WebKitGTK Heap Buffer Overflow DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access the memory contents of processes using a specially crafted web page or...

CVE-2019-12874: Double Free

An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska demuxer, while parsing a malformed MKV file type, has a double free...

CVE-2019-12149

SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...

Partial Physical Address Leakage Vulnerability - Lenovo Support US

No description provided...

Partial Physical Address Leakage Vulnerability - US

Lenovo Security Advisory: LEN-27842 Potential Impact: Information disclosure Severity: Low Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0174 Summary Description: A potential security vulnerability in some microprocessors may allow partial information disclosure via local access. This...

Fedora Update for drupal7-context FEDORA-2019-62eba285ee

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for drupal7-ds FEDORA-2019-5258ea8ae2

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-9883

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

Cross site request forgery (csrf)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

[SECURITY] Fedora 29 Update: drupal7-views-3.23-1.fc29

You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...

[SECURITY] Fedora 29 Update: drupal7-context-3.10-1.fc29

Context allows you to manage contextual conditions and reactions for differ ent portions of your site. You can think of each context as representing a "sec tion" of your site. For each context, you can choose the conditions that trigger this context to be active and choose different aspects of...

[SECURITY] Fedora 30 Update: drupal7-xmlsitemap-2.6-1.fc30

The XML sitemap module creates a sitemap that conforms to the sitemaps.org specification 1. This helps search engines to more intelligently crawl a website and keep their results up to date. The sitemap created by the module can be automatically submitted to Ask, Google, Bing formerly Windows Liv...

CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

PT-2019-7550

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 6.5.0 Description The issue allows SQL injection via the contactidlist parameter in the modules/Calendar/Activity.php file. Recommendations For Vtiger CRM version 6.5.0, avoid using the contactidlist parameter in the affecte...

CVE-2016-8898: Improper Neutralization of Special Elements used in an SQL Command

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

PT-2019-7552

Name of the Vulnerable Software and Affected Versions Kliqqi version 3.0.0.5 Description The issue allows for CSRF with resultant Arbitrary File Upload. This is possible because the "module.php?module=upload" endpoint can be used to configure the uploading of .php files, and then the...

CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-8899

Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...

CVE-2016-8897: Improper Neutralization of Special Elements used in an SQL Command

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...