PT-2021-7969 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: xpdf version 4.02 Description: The issue is related to an infinite recursion in the Catalog::findDestInTree function, which can cause a denial of service. This function is part of the xpdf software, used for viewing PDF files. The recursion i...

MGASA-2021-0001 Updated audacity package fixes security vulnerability

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there CVE-2020-11867...

Updated audacity package fixes security vulnerability

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there CVE-2020-11867...

CVE-2020-27534

util/binfmtmisc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call...

PT-2020-16700 · Docker · Docker Engine +1

Name of the Vulnerable Software and Affected Versions: Docker Engine versions prior to 19.03.9 Description: The issue arises from the util/binfmt misc/check.go file in the Builder component of Docker Engine, where it calls os.OpenFile with a potentially unsafe temporary pathname for qemu-check...

OpenDKIM Elevation of Privilege Vulnerability

Opendkim is a C-based software for DKIM sender authentication system organized by Opendkim. An elevation of privilege vulnerability exists in OpenDKIM version 2.10.3 and prior versions, which stems from a failure of a properly programmed call to a high-level local procedure, whereby a local user...

OpenDKIM 后置链接漏洞

Opendkim is a C-based software for DKIM sender authentication system organized by Opendkim. An elevation of privilege vulnerability exists in OpenDKIM version 2.10.3 and prior versions, which stems from a failure of a properly programmed call to a high-level local procedure, whereby a local user...

WordPress Internal Links Manager plugin <= 2.1.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by Chevon Phillip in WordPress Internal Links Manager plugin versions = 2.1.0. Solution 2020-12-28 - we were unable to find a patched version of this plugin. Notification from WordPress.org - "This plugin has been closed...

postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution

A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function...

Virtuozzo 6 : polkit / polkit-desktop-policy / polkit-devel / etc (VZLSA-2019-0420)

An update for polkit is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security update for PackageKit (moderate)

openSUSE Security Update: Security update for PackageKit Announcement ID: openSUSE-SU-2020:2292-1 Rating: moderate References: 1169739 1176930 Cross-References: CVE-2020-16121 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available...

OPENSUSE-SU-2020:2292-1 Security update for PackageKit

This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 This update was imported...

PT-2020-17338 · Wikimedia +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.33.0 through 1.35.1 Description: The issue allows for XSS via BlockLogFormatter.php, where MediaWiki:blanknamespace can potentially be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink. Recommendations: F...

postgresql: Multiple features escape "security restricted operation" sandbox

A flaw was found in postgresql. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

SUSE SLED15 / SLES15 Security Update : PackageKit (SUSE-SU-2020:3845-1)

This update for PackageKit fixes the following issue : CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739 Note that Tenable Network...

SUSE-SU-2020:3845-1 Security update for PackageKit

This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. bsc1169739...

The vulnerability lies in the implementation of the PrintData or PrintStats functions in the network traffic balancing system’s Keepalived component. This allows attackers to gain access to the protected information.

The vulnerability of the PrintData or PrintStats implementation in the network traffic balancing system of Keepalived is related to errors in processing temporary files. Exploiting this vulnerability can allow an attacker to access protected information through a specially created file...

Security update for audacity (moderate)

openSUSE Security Update: Security update for audacity Announcement ID: openSUSE-SU-2020:2261-1 Rating: moderate References: 1179449 Cross-References: CVE-2020-11867 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 An update that...

CVE-2020-8908

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure...

Google Guava Access Control Error Vulnerability

Google Guava is a U.S. Google Google company , including graphics libraries , function types , I / O and string processing , etc. of the core Java library . An Access Control Error vulnerability exists in Guava prior to version 30.0, which stems from a temporary directory creation vulnerability i...