openssl:provider: Heap-buffer-overflow in bin2bn

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6120637956685824 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bec1ebe5af5 Crash...

Debian DLA-1096-1 : wordpress-shibboleth security update

It was discovered that there was a an XSS vulnerability in the login form of the 'Shibboleth' identity provider module for Wordpress. For Debian 7 'Wheezy', this issue has been fixed in wordpress-shibboleth version 1.4-2+deb7u1. We recommend that you upgrade your wordpress-shibboleth packages...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the XC NCIP Provider module in the eXtensible Catalog XC Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request...