PT-2020-12311 · Containernetworking +5 · Containernetworking-Plugins +5

Name of the Vulnerable Software and Affected Versions: containernetworking/plugins versions prior to 0.8.6 Description: A vulnerability was found that allows malicious containers in Kubernetes clusters to perform man-in-the-middle MitM attacks. A malicious container can exploit this flaw by sendi...

CVE-2014-8939

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...

Debian DLA-2225-1 : gst-plugins-good0.10 security update

Two memory handling issues were found in gst-plugins-good0.10, a collection of GStreamer plugins from the 'good' set : CVE-2016-10198 An invalid read can be triggered in the aacparse element via a maliciously crafted file. CVE-2017-5840 An out of bounds heap read can be triggered in the qtdemux...

PT-2020-7762

Name of the Vulnerable Software and Affected Versions Lexiglot through 2014-11-20 Description The issue allows remote attackers to obtain sensitive information, specifically the full path, via a request to the "include/smarty/plugins/modifier.date format.php" endpoint if PHP has a non-recommended...

PT-2020-17830

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.8.1 Description The issue allows remote attackers to get the ID of configured Jira application links via an information disclosure. This is possible through the /plugins/servlet/jira-blockers/...

Debian: Security Advisory (DLA-2225-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2226-1] gst-plugins-ugly0.10 security update

Package : gst-plugins-ugly0.10 Version : 0.10.19-2.1+deb8u1 CVE ID : CVE-2017-5846 CVE-2017-5847 Two memory management issues were found in the asfdemux element of the GStreamer "ugly" plugin collection, which can be triggered via a maliciously crafted file. For Debian 8 "Jessie", these problems...

[SECURITY] [DLA 2225-1] gst-plugins-good0.10 security update

Package : gst-plugins-good0.10 Version : 0.10.31-3+nmu4+deb8u3 CVE ID : CVE-2016-10198 CVE-2017-5840 Two memory handling issues were found in gst-plugins-good0.10, a collection of GStreamer plugins from the "good" set: CVE-2016-10198 An invalid read can be triggered in the aacparse element via a...

DLA-2226-1 gst-plugins-ugly0.10 - security update

Bulletin has no description...

DLA-2225-1 gst-plugins-good0.10 - security update

Bulletin has no description...

[SECURITY] Fedora 31 Update: dovecot-2.3.10.1-1.fc31

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements

CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L 6.0 Medium A cluster configured to use an affected container networking implementation is susceptible to man-in-the-middle MitM attacks. By sending “rogue” router advertisements, a malicious container can reconfigure the host to redirect...

openSUSE Security Update : gstreamer-plugins-base (openSUSE-2020-678)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive te...

openSUSE: Security Advisory for gstreamer-plugins-base (openSUSE-SU-2020:0678-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0678-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. This update was imported from the SUSE:SLE-15:Update update project...

Security update for gstreamer-plugins-base (important)

openSUSE Security Update: Security update for gstreamer-plugins-base Announcement ID: openSUSE-SU-2020:0678-1 Rating: important References: 1133375 Cross-References: CVE-2019-9928 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This upda...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-base (SUSE-SU-2020:1300-1)

This update for gstreamer-plugins-base fixes the following issue : Security issue fixed : CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2020:1300-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser bsc1133375...

GLSA-202005-06 : LIVE555 Media Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-06 LIVE555 Media Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced...

metasploit-framework

This is an instance of the Metasploit Framework repository, a widely used penetration testing tool. The Metasploit Framework is a comprehensive platform for testing and exploiting vulnerabilities in computer systems and applications. It is a collection of tools and scripts that can be used to...