1072 matches found
DLA-1419-1 ruby-sprockets - security update
Bulletin has no description...
DSA-4237-1 chromium-browser - security update
Bulletin has no description...
DLA-1409-1 mosquitto - security update
Bulletin has no description...
SUSE-SU-2018:1822-1 Security update for gcc43
This update for gcc43 fixes the following issues: This update adds support for 'expolines' on s390x, allowing fixing CVE-2017-5715 in a more lightweight fashion. bsc1086069 The option flags are the same as for the x86 retpolines. A compiler crash when building userland packages with x86 retpoline...
DSA-4224-1 gnupg - security update
Bulletin has no description...
Arbitrary Code Injection in reduce-css-calc
Affected versions of reduce-css-calc pass input directly to eval. If user input is passed into the calc function, this may result in cross-site scripting on the browser, or remote code execution on the server. Proof of Concept const reduceCSSCalc = require'reduce-css-calc';...
“Upgrade in progress. This operation will take about 20 minutes. Please re-login after 20 minutes” on NetScaler SD-WAN
The following message is displayed under Configuration System Maintenance Update Software: “Upgrade in progress. This operation will take about 20 minutes. Please re-login after 20 minutes.”...
PT-2018-23: Remote Code Execution in PRTG Network Monitor
The specialists of the Positive Research center have detected a Remote Code Execution vulnerability in PRTG Network Monitor. Vulnerability due to improper handling of user input in the POST parameter 'proxyport' allows remote authenticated attackers with read-write privileges to execute an...
JVN#67881316: Multiple vulnerabilities in baserCMS
baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-0569 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L| Base Score: 6.3 CVS...
WordPress Charitable plugin <= 1.5.13 - Unauthorized Access vulnerability leading to Sensitive Information Disclosure
Unauthorized Access vulnerability leading to Sensitive Information Disclosure discovered in WordPress Charitable plugin versions = 1.5.13. Solution Update the WordPress Charitable plugin to the latest available version at least 1.5.14...
Path Traversal
Overview Versions of glance before 3.0.4 are vulnerable to path traversal allowing a remote attacker to read arbitrary files from the server using glance. Recommendation Update to version 3.0.4 or later. References - GitHub Commit 8cfd88e - HackerOne Report - GitHub Advisory...
DSA-4179-1 linux-tools - security update
Bulletin has no description...
DLA-1361-1 psensor - security update
Bulletin has no description...
DSA-4176-1 mysql-5.5 - security update
Bulletin has no description...
JVN#65268217: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:N/AC:L/Au:S/C:P/I:N/A:N|...
DLA-1283-2 python-crypto - security update
Bulletin has no description...
DSA-4164-1 apache2 - security update
Bulletin has no description...
Safari vulnerable to script injection
Overview Safari provided by Apple Inc. contains a script injection vulnerability CWE-81 in the processing of displaying an error page when it fails to verify server certificates. In an error page Safari displays when it fails to verify server certificates, a domain name of the website accessed is...
JVN#72589538: LXR vulnerable to OS command injection
LXR provided by LXR Project contains an OS command injection vulnerability CWE-78. Impact On a server where the product is running, a remote attacker may execute an arbitrary OS command. Solution Update the Software Update to the latest version according to the information provided by the...