5559 matches found
Fedora: Security Advisory for nodejs (FEDORA-2020-3838c8ea98)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Scientific Linux Security Update : kernel on SL7.x x86_64 (20200205)
Security Fixes : - kernel: heap overflow in mwifiexupdatevsie function of Marvell WiFi driver CVE-2019-14816 - kernel: heap-based buffer overflow in mwifiexprocesscountryie function in drivers/net/wireless/marvell/mwifiex/staioctl.c CVE-2019-14895 - kernel: heap overflow in marvell/mwifiex/tdls.c...
[SECURITY] Fedora 31 Update: sysstat-12.3.1-1.fc31
The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics...
Part II: Returning to Adobe Reader symbols on macOS
Posted by Mateusz Jurczyk, Project Zero In a blog post titled "The story of Adobe Reader symbols" published in October 2019, I presented an analysis of the debug symbols shipped with some older versions of Adobe Reader for Unix-family systems released between 1997-2013. Such symbols can prove...
vet-o-vet.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1075632 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
[SECURITY] Fedora 31 Update: nodejs-12.14.1-3.fc31
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1535)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1528)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-10214
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...
Fedora Update for squid FEDORA-2019-9538783033
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-5082
CVE-2019-5082 affects WAGO PFC200/PFC100 iocheckd “I/O-Check” via a heap buffer overflow in handling inputs (notably ReadPCBManuNum). A specially crafted, unauthenticated packet can trigger heap overflow leading to remote code execution. Affected firmwares include PFC200 03.01.07(13), 03.00.39(12...
CVE-2019-14819
A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by...
Design/Logic Flaw
A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by...
CVE-2019-14819
A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by...
CVE-2019-14819
Summary: CVE-2019-14819 affects OpenShift Container Platform during upgrade with CRI-O. The dockergc service account is incorrectly bound to the current user’s namespace, which can let an unprivileged user escalate privileges to the level allowed by the privileged Security Context Constraints. Im...
o-jeju.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1060727 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
UPX Invalid Memory Address Dereference Vulnerability
UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An invalid memory address dereference vulnerability exists in the canUnpack function in pmach.cpp in UPX 3.95. An attacker can exploit this vulnerability to cause a...
DEBIAN-CVE-2019-20053
An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
