4228 matches found
PT-2019-9924
Name of the Vulnerable Software and Affected Versions aubio versions 0.4.0 through 0.4.8 Description The issue is related to a NULL pointer dereference in the new aubio onset function within the src/notes/notes.c file, specifically in the new aubio notes function. Additionally, there is a Buffer...
CVE-2019-1003037: Missing Authorization
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
Denial Of Service (DoS)
libmatio.so is vulnerable to denial of service DoS attacks. The vulnerability exists through a possible stack-based buffer over-read in a memcpy operation in MatVarReadNextInfo5 in src/mat5.c, resulting in a denial of service condition when the vulnerability is exploited...
CVE-2019-9195: Improper Limitation of a Pathname to a Restricted Directory
util/src/zip.rs in Grin before 1.0.2 mishandles suspicious files. An attacker can execute arbitrary code via directory traversal in a ZIP archive...
WS-2019-0542
openthread in versions thread-reference-20170716 to thread-reference-2018-0926 is vulnerable to UNKNOWN READ, related to src/core/common/message.hpp...
CVE-2019-1003014: Improper Neutralization of Input During Web Page Generation
An cross-site scripting vulnerability exists in Jenkins Config File Provider Plugin 3.4.1 and earlier in src/main/resources/lib/configfiles/configfiles.jelly that allows attackers with permission to define shared configuration files to execute arbitrary JavaScript when a user attempts to delete t...
WS-2019-0517
OpenType Sanitizer in versions v7.0.0 to v7.1.8 is vulnerable to heap-buffer-overflow in ots::OpenTypeSTAT::Serialize on src/stat.cc...
Debian DSA-4374-1 : qtbase-opensource-src - security update
Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI. C Tenable Network Security, Inc. The...
[SECURITY] [DSA 4374-1] qtbase-opensource-src security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4374-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 28, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4374-1] qtbase-opensource-src security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4374-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 28, 2019 https://www.debian.org/security/faq -...
DSA-4374-1 qtbase-opensource-src - security update
Bulletin has no description...
Debian: Security Advisory (DSA-4374-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PhpSpreadsheet 1.5.0 XXE vulnerability reproduction and analysis-vulnerability warning-the black bar safety net
0x01 introduction PhpSpreadsheet is a very popular pure PHP class library that allows you to easily read and write Excel, LibreOffic Calc and other spreadsheet file formats, is PHPExcel alternative. 2018 11 October 13, PhpSpreadsheet was broke presence of the XXE vulnerability, CVE-2018-19277, in...
WS-2019-0572
Openthread in versions thread-reference-20180619 to thread-reference-20180926is vulnerable to Stack-buffer-overflow in ot::Cli::Interpreter::ProcessService, related to src/cli/cli.cpp...
CVE-2019-1003003
An improper authorization vulnerability exists in Jenkins 2.158 and earlier, LTS 2.150.1 and earlier in core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java that allows attackers with Overall/RunScripts permission to craft Remember Me cookies that would never expire, allowing e.g...
WS-2019-0550
openthread in versionsthread-reference-20170716 to thread-reference-20180926 is vulnerable to Stack-buffer-overflow, related to src/core/thread/networkdatalocal.cpp...
WS-2019-0577
ReadStat in versions 0.1.0 to 0.1.1 is vulnerable to Stack-buffer-overflow in readstatconvert, related to src/readstatconvert.c...
PT-2019-7239
Name of the Vulnerable Software and Affected Versions MailEnable versions prior to 8.60 Description The issue allows for Stored XSS attacks through the use of a malformed "" character in the body of an e-mail message. Recommendations For MailEnable versions prior to 8.60, update to version 8.60 o...
Remote Code Execution (RCE)
github.com/src-d/go-git is vulnerable to remote code execution RCE attacks. A malicious user can pass a .gitmodules file to the application to cause arbitrary code to be executed on a target machine that runs the git clone --recurse-submodules command. This is related to CVE-2018-11235...