BELL-CVE-2023-3301

Bulletin has no description...

GSD-2022-1003192 netfilter: nf_tables: disallow non-stateful expression in sets earlier

netfilter: nftables: disallow non-stateful expression in sets earlier This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.13 by commit...

MGASA-2022-0199 Updated ffmpeg packages fix security vulnerability

This update provides ffmpeg version 4.3.4, which fixes several security vulnerabilities and other bugs which were corrected upstream...

GSD-2022-1002254 drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()

drm/amd/display: Fix a NULL pointer dereference in amdgpudmconnectoraddcommonmodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by...

CVE-2021-20324

...

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

phpservermon is vulnerable to CRLF Injection

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences...

GSD-2021-1002191 cfg80211: fix management registrations locking

cfg80211: fix management registrations locking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

CVE-2019-15494

openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21...

CVE-2019-1020014

docker-credential-helpers before 0.6.3 has a double free in the List functions...

Authorization Bypass

powershell is vulnerable to authorization bypass. An attacker is able to bypass Device Guard due to a flaw in the security feature...

CVE-2019-9621

Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component...

MGASA-2018-0285 Updated imagemagick packages fix security vulnerability

Imagemagick has been updated to version 6.9.10.0 to fix several bugs and possible security issues. - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts - Missing break when checking "compliance" element. - Fixed errant 'not enough pixel data' - Fixed memor...

SS-2018-006: Code execution vulnerability

More info at https://www.silverstripe.org/download/security-releases/ss-2018-006/...

CVE-2018-10126

ijg-libjpeg before 9d, as used in tiff2pdf from LibTIFF and other products, does not check for a NULL pointer at a certain place in jpegfdct16x16 in jfdctint.c...

MGASA-2017-0459 Updated rsync package fixes security vulnerability

The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact by sendi...

CVE-2017-17522

Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is...

CVE-2017-16667

backintime aka Back in Time before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell commands within an os.system call in qt4/plugins/notifyplugin.py. This could allow an attacker to craft...

CURL-CVE-2016-8621 curl_getdate read out of bounds

The curlgetdate converts a given date string into a numerical timestamp and it supports a range of different formats and possibilities to express a date and time. The underlying date parsing function is also used internally when parsing for example HTTP cookies possibly received from remote serve...

MGASA-2016-0210 Updated mediawiki packages fix security vulnerability

The mediawiki package has been updated to version 1.23.14, which fixes multiple security issues and other bugs. See the release announcements for more details...