resources.peakscientific.com Cross Site Scripting vulnerability OBB-1416510

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20201012)

Security Fixes : - kernel: Count overflow in FUSE request leading to use-after-free issues. CVE-2019-11487 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141410; scriptversion"1.3";...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20201012)

Security Fixes : - bind: truncated TSIG response can lead to an assertion failure CVE-2020-8622 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141412; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate"...

smartglobe.oregonscientific.com Cross Site Scripting vulnerability OBB-1383804

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20201001)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 CVE-2020-15673 - Mozilla: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15676 - Mozilla: Download origin spoofing via redirect CVE-2020-15677 - Mozilla: When recursing throu...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200924)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 CVE-2020-15673 - Mozilla: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15676 - Mozilla: Download origin spoofing via redirect CVE-2020-15677 - Mozilla: When recursing throu...

resources.peakscientific.com Cross Site Scripting vulnerability OBB-1339818

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

atomscientific.com Cross Site Scripting vulnerability OBB-1336098

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200908)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid140441;...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200908)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid140440;...

Scientific Linux Security Update : dovecot on SL7.x x86_64 (20200903)

Security Fixes : - dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 - dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673 - dovecot: Crash due to assert in RPA implementation CVE-2020-12674 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200826)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139893;...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)

Security Fixes : - kernel: NULL pointer dereference in searchkeyring CVE-2017-2647 - kernel: heap-based buffer overflow in lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c CVE-2019-14896 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200826)

Security Fixes : - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139894; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200806)

Security Fixes : - chromium-browser: Use after free in ANGLE CVE-2020-6463 - chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6514 - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200806)

Security Fixes : - chromium-browser: Use after free in ANGLE CVE-2020-6463 - chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6514 - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

Scientific Linux Security Update : postgresql-jdbc on SL7.x (noarch) (20200803)

Security Fixes : - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid139354; scriptversion"1.2";...

Scientific Linux Security Update : postgresql-jdbc on SL6.x (noarch) (20200803)

Security Fixes : - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid139353; scriptversion"1.3";...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200730)

Security Fixes : - chromium-browser: Use after free in ANGLE CVE-2020-6463 - chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6514 - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

Scientific Linux Security Update : libvncserver on SL7.x x86_64 (20200803)

Security Fixes : - libvncserver: websocket decoding buffer overflow CVE-2017-18922 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139301; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...