DSA-4247-1 ruby-rack-protection - security update

Bulletin has no description...

DLA-1420-1 cinnamon - security update

Bulletin has no description...

DLA-1419-1 ruby-sprockets - security update

Bulletin has no description...

DSA-4237-1 chromium-browser - security update

Bulletin has no description...

DLA-1409-1 mosquitto - security update

Bulletin has no description...

SUSE-SU-2018:1822-1 Security update for gcc43

This update for gcc43 fixes the following issues: This update adds support for 'expolines' on s390x, allowing fixing CVE-2017-5715 in a more lightweight fashion. bsc1086069 The option flags are the same as for the x86 retpolines. A compiler crash when building userland packages with x86 retpoline...

DSA-4224-1 gnupg - security update

Bulletin has no description...

Arbitrary Code Injection in reduce-css-calc

Affected versions of reduce-css-calc pass input directly to eval. If user input is passed into the calc function, this may result in cross-site scripting on the browser, or remote code execution on the server. Proof of Concept const reduceCSSCalc = require'reduce-css-calc';...

“Upgrade in progress. This operation will take about 20 minutes. Please re-login after 20 minutes” on NetScaler SD-WAN

The following message is displayed under Configuration System Maintenance Update Software: “Upgrade in progress. This operation will take about 20 minutes. Please re-login after 20 minutes.”...

PT-2018-23: Remote Code Execution in PRTG Network Monitor

The specialists of the Positive Research center have detected a Remote Code Execution vulnerability in PRTG Network Monitor. Vulnerability due to improper handling of user input in the POST parameter 'proxyport' allows remote authenticated attackers with read-write privileges to execute an...

JVN#67881316: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-0569 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L| Base Score: 6.3 CVS...

WordPress Charitable plugin <= 1.5.13 - Unauthorized Access vulnerability leading to Sensitive Information Disclosure

Unauthorized Access vulnerability leading to Sensitive Information Disclosure discovered in WordPress Charitable plugin versions = 1.5.13. Solution Update the WordPress Charitable plugin to the latest available version at least 1.5.14...

Path Traversal

Overview Versions of glance before 3.0.4 are vulnerable to path traversal allowing a remote attacker to read arbitrary files from the server using glance. Recommendation Update to version 3.0.4 or later. References - GitHub Commit 8cfd88e - HackerOne Report - GitHub Advisory...

DSA-4179-1 linux-tools - security update

Bulletin has no description...

DLA-1361-1 psensor - security update

Bulletin has no description...

DSA-4176-1 mysql-5.5 - security update

Bulletin has no description...

JVN#65268217: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:N/AC:L/Au:S/C:P/I:N/A:N|...

DLA-1283-2 python-crypto - security update

Bulletin has no description...

DSA-4164-1 apache2 - security update

Bulletin has no description...

Safari vulnerable to script injection

Overview Safari provided by Apple Inc. contains a script injection vulnerability CWE-81 in the processing of displaying an error page when it fails to verify server certificates. In an error page Safari displays when it fails to verify server certificates, a domain name of the website accessed is...