openSUSE Security Update : exim (openSUSE-2019-1812)

This update for exim fixes the following issues : - CVE-2019-13917: Fixed an issue with $sort expansion which could allow remote attackers to execute other programs with root privileges boo1142207. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Code injection

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local...

CVE-2019-10166

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local...

CVE-2019-10166

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local...

CVE-2019-10166: Improper Access Control

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local...

libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API

It was discovered that libvirtd would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of...

libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API

It was discovered that libvirtd would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of...

CVE-2019-10166

It was discovered that libvirtd would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would...

PT-2019-2883

Name of the Vulnerable Software and Affected Versions libvirtd versions prior to 4.10.1 libvirtd versions prior to 5.4.1 Description The issue is related to the virDomainSaveImageGetXMLDesc API, which has access control errors. This allows an attacker with access to the libvirtd socket to probe t...

PT-2019-2575

Name of the Vulnerable Software and Affected Versions libvirtd versions 4.x.x through 4.10.0 libvirtd versions 5.x.x through 5.4.0 Description The issue is related to insufficient access control in the virDomainManagedSaveDefineXML API, allowing readonly clients to modify managed save state files...

CVE-2019-10038: Improper Limitation of a Pathname to a Restricted Directory

Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file...

CVE-2019-12137

Typora 0.9.9.24.6 on macOS is affected by CVE-2019-12137 (directory traversal) that allows execution of arbitrary programs via crafted file:/// or ../ substrings in a shared note. Root cause is path traversal through URI handling, enabling local code execution. Publicly documented impact is arbit...

CVE-2019-12138: Improper Limitation of a Pathname to a Restricted Directory

MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note...

Xlight FTP Server 3.9.1 - Buffer Overflow (PoC)

Xlight FTP Server 3.9.1 - Buffer Overflow PoC Exploit Title: Xlight 3.9.1 FTP Server SEH Overwrite Google Dork: N/A Date: 2019-02-24 Exploit Author: Logan Whitmire Vendor Homepage: https://www.xlightftpd.com/index.htm Software Link: https://www.xlightftpd.com/download/xlight.zip Version: 3.9.1...

Microsoft Chakra JavaScript Loop Type Confusion Vulnerability

This vulnerability allows remote attackers to produce abnormal program execution on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-16084

Removed by vendor...

RUSTSEC-2018-0008 Bug in SliceDeque::move_head_unchecked allows read of corrupted memory

Affected versions of this crate did not properly update the head and tail of the deque when inserting and removing elements from the front if, before insertion or removal, the tail of the deque was in the mirrored memory region, and if, after insertion or removal, the head of the deque is exactly...

Authentication flaw

Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can allow attackers to bypass Windows authentication and execute commands on the system with the privileges of Pulse Secure Client. The attacker must interrupt the client's network...

Google Chrome has an unspecified vulnerability (CNVD-2019-03621)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the external protocol handling of CustomHandlers in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to open external programs with th...

PT-2018-1511

Name of the Vulnerable Software and Affected Versions YOKOGAWA iDefine for ProSafe-RS versions 1.16.3 and earlier YOKOGAWA STARDOM VDS versions 7.50 and earlier YOKOGAWA STARDOM FCN/FCJ Simulator versions 4.20 and earlier YOKOGAWA ASTPLANNER versions 15.01 and earlier YOKOGAWA TriFellows versions...