PT-2021-30867

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.18.5 Description The issue concerns some security problems in GStreamer. Recommendations For versions prior to 1.18.5, update to version 1.18.5 to resolve the issue...

PT-2021-30843

Name of the Vulnerable Software and Affected Versions privoxy versions prior to 3.0.32 Description The issue concerns security problems in the privoxy package. These issues have been fixed in version 3.0.32. No information is provided about the estimated number of potentially affected devices or...

PT-2021-16752 · Apport +2 · Apport +2

Name of the Vulnerable Software and Affected Versions: apport affected versions not specified Description: The issue concerns the get pid info function in the data/apport component, which fails to properly parse the /proc/pid/status file from the kernel. This parsing issue may lead to potential...

PT-2021-30831

Name of the Vulnerable Software and Affected Versions imagemagick versions prior to 7.0.10-55 Description The issue concerns several security problems in the imagemagick package. The estimated number of potentially affected devices is not specified. There is no information about real-world...

PT-2020-22808

Name of the Vulnerable Software and Affected Versions suricata versions prior to 4.1.9 Description The issue is related to security problems in the suricata package. For more details, refer to the upstream announcements. Recommendations For versions prior to 4.1.9, update to version 4.1.9 to...

openSUSE Security Update : singularity (openSUSE-2020-1011)

This update for singularity fixes the following issues : - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems : - CVE-2020-13845, boo1174150 In Singularity 3.x versions below...

PT-2020-22791

Name of the Vulnerable Software and Affected Versions python3 versions prior to 3.7.6 Description The issue concerns security problems and other bugs in the python3 package. The estimated number of potentially affected devices and details about real-world incidents are not specified...

PT-2020-7439

Name of the Vulnerable Software and Affected Versions: IrfanView FlashPix Plugin version 4.3.4 Description: The issue is related to an integer overflow, which may lead to security problems. Recommendations: For IrfanView FlashPix Plugin version 4.3.4, at the moment, there is no information about ...

FreeBSD : Pillow -- Multiple vulnerabilities (0700e76c-3eb0-11ea-8478-3085a9a95629)

Pillow developers report : This release addresses several security problems, as well as addressing CVE-2019-19911. CVE-2019-19911 is regarding FPX images. If an image reports that it has a large number of bands, a large amount of resources will be used when trying to process the image. This is...

PT-2019-6477

Name of the Vulnerable Software and Affected Versions Nvu versions 0.99 through 1.0pre Description The issue arises from Nvu using an outdated version of Mozilla XPCOM, which can lead to multiple security problems. Recommendations For Nvu versions 0.99 through 1.0pre, at the moment, there is no...

Security update for rdesktop (important)

openSUSE Security Update: Security update for rdesktop Announcement ID: openSUSE-SU-2019:2135-1 Rating: important References: 1121448 Cross-References: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182...

CVE-2018-20744

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...

Code injection

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...

CVE-2018-20744

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...

Impact of 62 million devices: the interpretation I is how to find the Marvell Avastar Wi-Fi remote code execution vulnerability-vulnerability warning-the black bar safety net

One, overview In the present study, I will mainly analyze the Marvell WiFi-FullMAC SoC security. Since we have not yet completed the product with a chip of a wireless device of research, and therefore which may contain large amounts of unaudited code, which might appear serious security problems...

PT-2018-19295

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves security problems that are addressed by updated packages, though specific details about the nature of these security issues are not provided. Recommendations At the...

Secure Speculative Execution

We're starting to see research into designing speculative execution systems that avoid Spectre- and Meltdown-like security problems. Here's one. I don't know if this particular design secure. My guess is that we're going to see several iterations of design and attack before we settle on something...

PT-2018-4685

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to the incorrect implementation of RSA padding functions in CORE, which may lead to security problems. Recommendations For Android versions prior to...

Domain Analyzer

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Domain analyzer takes a domain name and finds information about it, such as DNS servers, mail servers, IP addresse...

DELTA - SDN Security Evaluation Framework

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...