1494 matches found
SUSE SLES12 Security Update : less (SUSE-SU-2020:2687-1)
This update for less fixes the following issues : Security issue fixed : CVE-2014-9488: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access bsc921719. Note that Tenable Network Security has extracted the preceding description...
CVE-2020-7772
This affects the package doc-path before 2.1.2...
CVE-2020-7709
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
ai4bharat-transliteration (>=1.1.0 <=1.1.3), aipack (>=0.0.1 <=0.0.5) +52 more potentially affected by CVE-2020-15203 via tensorflow (>=2.0.0 <=2.0.1)
tensorflow PYPI version =2.0.0, =1.1.0, =0.0.1, =0.1.3.2, =0.2.6, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15203 Source advisory: OSV:PYSEC-2020-126...
Ubuntu: Security Advisory (USN-4453-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
GHSA-6PHF-73Q6-GH87 vulnerabilities
Vulnerabilities for packages: trino...
CVE-2020-2812 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-2761 vulnerabilities
Vulnerabilities for packages: mysql...
Updated pcre packages fix security vulnerability
Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference, as well as other bugs. See the upstream changelog for details...
MGASA-2020-0124 Updated pcre packages fix security vulnerability
Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference, as well as other bugs. See the upstream changelog for details...
MGASA-2019-0326 Updated cpio packages fix security vulnerabilities
in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...
MGASA-2019-0246 Updated monit packages fix security vulnerabilities
Updated monit package fixes security vulnerabilities: Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting XSS attacks CVE-2019-11454. Zack Flack discovered a buffer overread when Monit decoded certain...
Fedora Update for openqa FEDORA-2019-c404576415
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
101 (>=0.3.0 <=0.7.1), 3c (>=0.0.1 <=1.0.0-alpha) +3346 more potentially affected by unknown CVE via handlebars (>=1.0.10 <=3.0.3)
handlebars NPM version =1.0.10, =0.3.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =1.31.0, =0.1.16, =0.9.33, =0.9.33, =5.0.2, =5.0.3, =5.0.6, =5.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q42P-PG8M-CQH6...
CVE-2019-2607 vulnerabilities
Vulnerabilities for packages: mysql...
What’s in the Box?
ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...
[ASA-201901-16] nasm: denial of service
Arch Linux Security Advisory ASA-201901-16 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2019-6290 CVE-2019-6291 Package : nasm Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-852 Summary ======= The package nasm before...
@antarctica/bas-style-kit (>=0.5.0 <=0.5.0-beta), @antistatique/retraitespopulaires-styleguide (>=0.0.1 <=1.8.4) +153 more potentially affected by CVE-2018-20677 via bootstrap-sass (>=2.3.2 <=3.3.7)
bootstrap-sass NPM version =2.3.2, =0.5.0, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui =8.3.3 and more Source cves: CVE-2018-20677 Source advisory: OSV:GHSA-PH58-4VRJ-W6HR...