CVE-2018-16198

CVE-2018-16198 affects Toshiba Home gateway HEM-GW16A and HEM-GW26A (firmware 1.2.9 and earlier). The issue is described as hidden functionality (CWE-912) that allows an attacker on the same network segment to access a non-documented developer screen and perform operations on the device. NVD note...

SUSE SLES11 Security Update : xen (SUSE-SU-2019:13921-1)

This update for xen fixes the following issues : Security vulnerabilities fixed : CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service DoS affecting the enti...

SUSE SLED15 / SLES15 Security Update : gpg2 (SUSE-SU-2019:0023-1)

This update for gpg2 fixes the following issue : Security issue fixed : CVE-2018-1000858: Fixed a Cross Site Request ForgeryCSRF vulnerability in dirmngr that can result in Attacker controlled CSRF bsc1120346. Note that Tenable Network Security has extracted the preceding description block direct...

Fedora 28 : tcpreplay (2018-166b220ff1)

This release 4.3.1 contains bug fixes only : - Fix checkspell detected typos 531 - Heap overflow packet2tree and getl2len 530 This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements : - Fix maxOS TOS checksum failure 524 - TCP sequence edits seeding 514 - Fix issues...

Fedora 29 : python3 / python3-docs (2019-f9d5bbef82)

Python update to 3.7.2. Read the release announcement or the full changelog. Mostly bugfixes, but also 2 security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 29 : tcpreplay (2018-5f91054677)

This release 4.3.1 contains bug fixes only : - Fix checkspell detected typos 531 - Heap overflow packet2tree and getl2len 530 This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements : - Fix maxOS TOS checksum failure 524 - TCP sequence edits seeding 514 - Fix issues...

Fedora 29 : wget (2019-088875c43a)

Update to upstream release 1.20.1 to fix CVE-2018-20483. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DLA-1624-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 'Jessie', this problem has been fixed in version 1:60.4.0-1deb8u1. We recommend that you upgrade your thunderbird packages. NOTE: Tenable Network Security...

Medium: nss-pem

Issue Overview: The nss-pem package provides the PEM file reader for Network Security Services NSS implemented as a PKCS11 module. This update contains fixes related to CURL security updates, specifically updating an object ID when reusing a certificate Affected Packages: nss-pem Note: This...

WAS Target Scanning for PCI

This plugin reports http addresses for http and https pages of a scanned system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109394; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/05/24"; scriptnameenglish:"WAS Target Scannin...

Fedora 28 : mingw-podofo (2018-578fa05659)

Backport security fixes for: CVE-2017-7380, CVE-2017-7381, CVE-2017-7382, CVE-2017-7383, CVE-2017-5852, CVE-2017-5853, CVE-2017-6844, CVE-2017-5854, CVE-2017-5855, CVE-2017-5886, CVE-2018-8000, CVE-2017-6840, CVE-2017-6842, CVE-2017-6843, CVE-2017-6845, CVE-2017-6847, CVE-2017-6848, CVE-2017-7378...

CVE-2019-3701

An issue was discovered in cancangwrcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the candlc field. The privileged user "root" with CAPNETADMIN can create a CAN frame modification rule that mak...

Fedora 28 : mod_http2 (2018-6ffb18592f)

Security update for CVE-2018-11763 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 29 : python-paramiko (2018-ea6b328afd)

Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an authentication bypass in paramiko/authhandler.py. A remote attacker could exploit this vulnerability in Paramiko SSH servers to execute arbitrary code. Note that applications using Paramiko only as a client such as ansible are not...

Fedora 28 : community-mysql (2018-00e90783d2)

MySQL 5.7.22 Changelog https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-22.html CVEs fixed CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762 CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775 CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779...

Fedora 29 : cairo (2018-3a195026f5)

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter. It also fixes a crash caused by using of wrong function for freeing of memory CVE-2018-19876. Note that Tenable Network Security has extracted the precedi...

Fedora 28 : libgcrypt (2018-1ea5beb4cf)

Minor security update to version 1.8.3 from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 28 : patch (2018-ed8d7c62c9)

Security fix for CVE-2018-1000156 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 28 : qt3 (2018-17843a895b)

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing...

Fedora 29 : drupal8 (2018-4381dd7d0b)

8.x release notes - SA-CORE-2018-006 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...