Ubuntu 14.04 LTS : PHP vulnerabilities (USN-3566-2)

USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2018-20783 It was...

PT-2019-2634 · Poppler +4 · Poppler +4

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 0.76.1 Description: The issue is related to a heap-based buffer over-read in the JPXStream::init function, located in JPEG2000Stream.cc, which can be triggered by data with inconsistent heights or widths. This can...

Huawei Leland-AL00A RTSP Module Denial of Service Vulnerability

Huawei Leland-AL00A is a smartphone from Huawei, China.RTSP module is one of the RTSP Real Time Streaming Protocol modules. A denial of service vulnerability exists in the RTSP module in Huawei Leland-AL00A prior to version 9.1.0.111 C00E111R2P10T8. An attacker can exploit this vulnerability by...

USN-3566-2 php5 vulnerabilities

USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. CVE-2018-20783 It was...

Drupal 7.x < 7.67 Third-Party Libraries Vulnerability

According to its self-reported version, the instance of Drupal running on the remote web server is 7.0.x prior to 7.67, 8.6.x prior to 8.6.16, or 8.7.x prior to 8.7.1. It is, therefore, affected by a path traversal vulnerability. This security release fixes third-party dependencies included in or...

Drupal 8.7.x < 8.7.1 Third-Party Libraries Vulnerability

According to its self-reported version, the instance of Drupal running on the remote web server is 7.0.x prior to 7.67, 8.6.x prior to 8.6.16, or 8.7.x prior to 8.7.1. It is, therefore, affected by a path traversal vulnerability. This security release fixes third-party dependencies included in or...

Fedora Update for ytnef FEDORA-2019-7d7083b8be

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for php-typo3-phar-stream-wrapper FEDORA-2019-d5f883429d

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: ytnef-1.9.3-1.fc30

Yerase's TNEF Stream Reader. Can take a TNEF Stream winmail.dat sent from Microsoft Outlook or similar products and extract the attachments, includ ing construction of Contact Cards & Calendar entries...

[SECURITY] Fedora 29 Update: php-typo3-phar-stream-wrapper-3.1.1-1.fc29

Interceptors for PHP's native phar:// stream handling. Autoloader: /usr/share/php/TYPO3/PharStreamWrapper/autoload.php...

[SECURITY] Fedora 28 Update: php-typo3-phar-stream-wrapper-3.1.1-1.fc28

Interceptors for PHP's native phar:// stream handling. Autoloader: /usr/share/php/TYPO3/PharStreamWrapper/autoload.php...

[SECURITY] Fedora 30 Update: php-typo3-phar-stream-wrapper-3.1.1-1.fc30

Interceptors for PHP's native phar:// stream handling. Autoloader: /usr/share/php/TYPO3/PharStreamWrapper/autoload.php...

Fedora 30 : php-typo3-phar-stream-wrapper (2019-3c89837025)

3.1.1 - TYPO3-PSA-2019-007 / CVE-2019-11831 - TYPO3-PSA-2019-008 / CVE-2019-11830 - 3.1.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 28 : php-typo3-phar-stream-wrapper (2019-4d93cf2b34)

3.1.1 - TYPO3-PSA-2019-007 / CVE-2019-11831 - TYPO3-PSA-2019-008 / CVE-2019-11830 - 3.1.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 29 : php-typo3-phar-stream-wrapper (2019-d5f883429d)

3.1.1 - TYPO3-PSA-2019-007 / CVE-2019-11831 - TYPO3-PSA-2019-008 / CVE-2019-11830 - 3.1.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for php-typo3-phar-stream-wrapper FEDORA-2019-3c89837025

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for php-typo3-phar-stream-wrapper FEDORA-2019-4d93cf2b34

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2013-7285

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON...

CVE-2013-7285

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON...

CVE-2019-11840

An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream i...