1135 matches found
EulerOS 2.0 SP5 : zziplib (EulerOS-SA-2020-2571)
According to the versions of the zziplib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64 and 0.13.63 there is a segmentation fault caused by invalid memory access in the zzipdiskfread...
EulerOS 2.0 SP5 : pki-core (EulerOS-SA-2020-2560)
According to the versions of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority KRA Agent Service did not properly sanitize recove...
EulerOS 2.0 SP5 : mesa (EulerOS-SA-2020-2555)
According to the version of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the...
EulerOS 2.0 SP5 : pcp (EulerOS-SA-2020-2557)
According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE...
EulerOS 2.0 SP5 : evolution-data-server (EulerOS-SA-2020-2544)
According to the version of the evolution-data-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to...
EulerOS 2.0 SP5 : evince (EulerOS-SA-2020-2542)
According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors fro...
SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2904-1)
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-26088: Fixed an improper CAPNETRAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security...
SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2981-1)
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' bsc1177724. CVE-2020-12352: Fixed an information leak when...
EulerOS 2.0 SP5 : cvs (EulerOS-SA-2020-2280)
According to the version of the cvs package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a...
EulerOS 2.0 SP5 : compat-openldap (EulerOS-SA-2020-2240)
According to the version of the compat-openldap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon...
EulerOS 2.0 SP5 : libplist (EulerOS-SA-2020-2288)
According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsedictnode function in bplist.c in libplist allows attackers to cause a denial of service out-of-bounds heap read and crash via a crafte...
EulerOS 2.0 SP5 : curl (EulerOS-SA-2020-2279)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libcurl from versions 7.29.0 through 7.71.1. An application that performs multiple requests with libcurl's multi API, and sets th...
EulerOS 2.0 SP5 : golang (EulerOS-SA-2020-2247)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid...
EulerOS 2.0 SP5 : libsndfile (EulerOS-SA-2020-2254)
According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader...
EulerOS 2.0 SP5 : mutt (EulerOS-SA-2020-2258)
According to the versions of the mutt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response.CVE-2020-14093 - Mutt before 1.14.4 and NeoMutt befo...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2020-2239)
According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - rememberKtype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption aka...
EulerOS 2.0 SP5 : python-rsa (EulerOS-SA-2020-2267)
According to the version of the python-rsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., ...
EulerOS 2.0 SP5 : libidn (EulerOS-SA-2020-2252)
According to the version of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibl...
sp5.lomza.pl Cross Site Scripting vulnerability OBB-1458690
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
