2014 matches found
openSUSE: Security Advisory for systemd (openSUSE-SU-2019:0097-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for systemd (openSUSE-SU-2019:0098-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for systemd (important)
openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0098-1 Rating: important References: 1005023 1045723 1076696 1080919 1093753 1101591 1111498 1114933 1117063 1119971 1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-6954 Affecte...
Security update for systemd (moderate)
openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0097-1 Rating: moderate References: 1005023 1076696 1101591 1114981 1115518 1119971 1120323 Cross-References: CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 Affected Products: openSUSE Leap 42.3 An update that...
iOS/macOS - 'task_swap_mach_voucher()' Use-After-Free
/ voucherswap-poc.c Brandon Azad / if 0 iOS/macOS: taskswapmachvoucher does not respect MIG semantics leading to use-after-free The dangers of not obeying MIG semantics have been well documented: see issues 926 CVE-2016-7612, 954 CVE-2016-7633, 1417 CVE-2017-13861, asyncwake, 1520 CVE-2018-4139,...
SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:0137-1)
This update for systemd provides the following fixes : Security issues fixed : CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled allocas bsc1120323 CVE-2018-16866: Fixed an information leak in journald bsc1120323 CVE-2018-6954: Fix mishandling of symlinks...
“Stole $24 Million But Still Can’t Keep a Friend”
Unsettling new claims have emerged about Nicholas Truglia, a 21-year-old Manhattan resident accused of hijacking cell phone accounts to steal tens of millions of dollars in cryptocurrencies from victims. The lurid details, made public in a civil lawsuit filed this week by one of his alleged...
UBUNTU-CVE-2018-19931
An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...
PT-2018-2454
Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31 Description An issue was discovered in the Binary File Descriptor BFD library, which is part of GNU Binutils. The problem is a heap-based buffer overflow in the bfd elf32 swap phdr in function, located in...
CVE-2018-18583
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...
CVE-2018-18583
An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap...
CVE-2018-17384
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17384
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
Sql injection
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17384
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17384: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...
PT-2018-14007
Name of the Vulnerable Software and Affected Versions Joomla! Swap Factory version 2.2.1 Description A SQL Injection issue exists in the Swap Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.2.1, consider...
CVE-2018-17384
CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...
Component Swap Factory SQL Injection Vulnerability in Joomla!
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Swap Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...
