1072 matches found
DSA-4151-1 librelp - security update
Bulletin has no description...
DSA-4146-1 plexus-utils - security update
Bulletin has no description...
DSA-4142-1 uwsgi - security update
Bulletin has no description...
DLA-1306-1 vips - security update
Bulletin has no description...
SUSE-SU-2018:0602-1 Security update for rubygem-puppet
This update for rubygem-puppet fixes the following issues: - CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files were unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily created with weird permissions...
JVN#56132776: Multiple vulnerabilities in Jubatus
Jubatus provided by Jubatus Community contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0524 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 5.6 CVSS v2| AV:N/AC:M/Au:N/C:P/I:P/A:P| Base Score: 6.8 Directory...
OS Property, 3.12.8, SQL Injection
OS Property from Joomdonation.com, 3.12.8 and previous, SQL Injection resolution: update to 3.12.9 note that previous security release 3.12.8 did not completely fix the issue update notice: https://www.joomdonation.com/forum/os-property/61368-os-property-3-12-9-released-security-issue-fixed.html...
DSA-4124-1 lucene-solr - security update
Bulletin has no description...
DSA-4126-1 xmltooling - security update
Bulletin has no description...
DLA-1289-1 irssi - security update
Bulletin has no description...
DLA-1287-1 zziplib - security update
Bulletin has no description...
DLA-1286-1 quagga - security update
Bulletin has no description...
DSA-4113-1 libvorbis - security update
Bulletin has no description...
DLA-1278-1 librsvg - security update
Bulletin has no description...
DLA-1275-1 uwsgi - security update
Bulletin has no description...
Multiple vulnerabilities in epg search result viewer(kkcald)
Overview epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Cross-site request forgery CWE-352 - CVE-2018-0509 Buffer overflow CWE-121 - CVE-2018-0510 Kusano Kazuhiko reported this vulnerability to IPA...
JVN#91393903: Multiple vulnerabilities in epg search result viewer(kkcald)
epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/AU:N/C:N/I:P/A:N| Base Score:...
WordPress Splashing Images plugin <=2.1 - Authenticated PHP Object Injection vulnerability
Authenticated PHP Object Injection vulnerability found by Nicolas Buzy-Debat in WordPress Splashing Images plugin versions =2.1. PHP Object Injection attack via crafted serialized data in the 'session' HTTP GET parameter to wp-admin/upload.php. Solution Update the WordPress Splashing Images plugi...