1533 matches found
MGASA-2021-0081 Updated gssproxy package fixes a security vulnerability
gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c CVE-2020-12658...
CVE-2021-2032 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-28470
This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...
SUSE SLES12 Security Update : less (SUSE-SU-2020:2687-1)
This update for less fixes the following issues : Security issue fixed : CVE-2014-9488: Malformed UTF-8 data could have caused an out of bounds read in the UTF-8 decoding routines, causing an invalid read access bsc921719. Note that Tenable Network Security has extracted the preceding description...
CVE-2020-7772
This affects the package doc-path before 2.1.2...
CVE-2020-7709
This affects the package json-pointer before 0.6.1. Multiple reference of object using slash is supported...
Ubuntu: Security Advisory (USN-4453-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
GHSA-6PHF-73Q6-GH87 vulnerabilities
Vulnerabilities for packages: trino...
CVE-2020-2812 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-2761 vulnerabilities
Vulnerabilities for packages: mysql...
Updated pcre packages fix security vulnerability
Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference, as well as other bugs. See the upstream changelog for details...
MGASA-2020-0124 Updated pcre packages fix security vulnerability
Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference, as well as other bugs. See the upstream changelog for details...
MGASA-2019-0326 Updated cpio packages fix security vulnerabilities
in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...
MGASA-2019-0246 Updated monit packages fix security vulnerabilities
Updated monit package fixes security vulnerabilities: Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting XSS attacks CVE-2019-11454. Zack Flack discovered a buffer overread when Monit decoded certain...
Fedora Update for openqa FEDORA-2019-c404576415
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-2607 vulnerabilities
Vulnerabilities for packages: mysql...
What’s in the Box?
ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...
[ASA-201901-16] nasm: denial of service
Arch Linux Security Advisory ASA-201901-16 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2019-6290 CVE-2019-6291 Package : nasm Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-852 Summary ======= The package nasm before...