Product update: Virtuozzo PowerPanel RTM Hotfix 6 (7.0.3-137)

The update for Virtuozzo PowerPanel introduces stability fixes. Vulnerability id: PP-546, PP-547 Unable to update the controller...

EulerOS 2.0 SP3 : perl (EulerOS-SA-2019-2648)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum,...

EulerOS 2.0 SP5 : perl (EulerOS-SA-2019-2220)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to...

DEBIAN-CVE-2018-20538

There is a use-after-free at asm/preproc.c function ppgetline in Netwide Assembler NASM 2.14rc16 that will cause a denial of service during certain finishes tests...

Microsoft Windows - CiSetFileCache WDAC Security Feature Bypass TOCTOU

Microsoft Windows - CiSetFileCache WDAC Security Feature Bypass TOCTOU Windows: CiSetFileCache TOCTOU CVE-2017-11830 Variant WDAC Security Feature Bypass Platform: Windows 10 1803, 1709 should include S-Mode but not tested Class: Security Feature Bypass Summary: While the TOCTOU attack against...

pp-shoes.de XSS vulnerability

Open Bug Bounty ID: OBB-597675 Description| Value ---|--- Affected Website:| pp-shoes.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Threat Outbreak Alert RuleID31879: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56634 First Published: 2018 January 31 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31879 may contain the following files: Name |...

pp-europe.be XSS vulnerability

Open Bug Bounty ID: OBB-522778 Description| Value ---|--- Affected Website:| pp-europe.be Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2017-17820

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

DEBIAN-CVE-2017-17813

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in the pplistonemacro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors...

Netwide Assembler 'pp_list_one_macro' function memory misreference vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A memory misreference vulnerability exists in the 'pplistonemacro' function in the asm/preproc.c file in NASM version 2.14rc0, which stems from the program's failure to properly handle operand type...

Product update: Virtuozzo PowerPanel RTM Hotfix 4 (7.0.1-422)

The new packages for Virtuozzo PowerPanel introduce a new feature as well as usability fixes. Vulnerability id: PP-336 Unable to select key combinations from the "Send Key Combination" list when using Mozilla Firefox. Vulnerability id: PP-506 Update could fail due to a package repository conflict...

CVE-2017-13038

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handlemlppp...

UBUNTU-CVE-2017-10686

In Netwide Assembler NASM 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token function and freed in the detoken function called by ppgetline - it is used again at multiple positions later that could cause multiple damages. F...

Product update: Virtuozzo PowerPanel RTM Hotfix 2 (7.0.1-354)

The new packages for Virtuozzo PowerPanel introducing usability bug fixes. Vulnerability id: PP-403 Installation of computes failed to complete if 'nodes.lst' had empty lines. Vulnerability id: PP-401 Unable to join computes due to incorrect repository priorities. Vulnerability id: PP-378 Improve...

Design/Logic Flaw

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

CVE-2017-7891

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

CVE-2017-7891

sourcebans-pp SourceBans++ 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter...

CVE-2017-7891

The CVE-2017-7891 issue concerns a Cross-Site Scripting (XSS) vulnerability in SourceBans++ (sourcebans-pp) version 1.5.4.7, specifically in admin.comms.php accessible via the rebanid parameter. The affected component is the admin interface of SourceBans++ and the root cause is an XSS flaw exploi...

Important product security update: Virtuozzo PowerPanel RTM Hotfix 1 (7.0.1-346)

The new packages for Virtuozzo PowerPanel introducing a security fix and usability bug fixes. Vulnerability id: PP-312 Incorrect checking of locked VM accounts in Virtuozzo SDK allowed one to use any password to log in to Virtuozzo PowerPanel in the legacy mode for a VM with such a locked account...