1074 matches found
DSA-4805-1 trafficserver - security update
Bulletin has no description...
DSA-4806-1 minidlna - security update
Bulletin has no description...
DLA-2480-1 salt - security update
Bulletin has no description...
DLA-2476-1 brotli - security update
Bulletin has no description...
DLA-2473-1 vips - security update
Bulletin has no description...
DLA-2471-1 libxstream-java - security update
Bulletin has no description...
OPENSUSE-SU-2020:2111-1 Security update for fontforge
This update for fontforge fixes the following issues: - fix for Use-after-free heap in the SFDGetFontMetaData function and the crash bsc1178308 CVE-2020-25690. This update was imported from the SUSE:SLE-15:Update update project...
CVE-2020-13942
It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest...
DSA-4797-1 webkit2gtk - security update
Bulletin has no description...
DLA-2459-1 golang-1.7 - security update
Bulletin has no description...
DSA-4794-1 mupdf - security update
Bulletin has no description...
OPENSUSE-SU-2020:1937-1 Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...
DLA-2447-1 pacemaker - security update
Bulletin has no description...
DLA-2440-1 poppler - security update
Bulletin has no description...
JVN#57942454: Cybozu Garoon vulnerable to improper input validation
Cybozu Garoon provided by Cybozu, Inc. contains an improper input validation vulnerability CWE-20. Impact A user who can login to the product may delete some data of the bulletin board. Solution Update the software and Apply the patch Update the software to Cybozu Garoon version 5.0.2, and then...
DSA-4782-1 openldap - security update
Bulletin has no description...
OPENSUSE-SU-2020:1731-1 Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. -...
SUSE-SU-2020:3021-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 CVE-2020-15969 Use-after-free in usersctp CVE-2020-15683 Memory safety bugs fixed in Firefox 82...
WordPress Simple Download Monitor plugin <= 3.8.8 - Unauthenticated Cross-Site Scripting (XSS) vulnerability
Unauthenticated Cross-Site Scripting XSS vulnerability found by Gen Sato Mitsui Bussan Secure Directions in WordPress Simple Download Monitor plugin versions = 3.8.8 . Solution Update the WordPress Simple Download Monitor plugin to the latest available version at least 3.8.9...