1074 matches found
GHSA-333X-9VGQ-V2J4 Directory Traversal in geddy
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors. Proof of Concept http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd Recommendation Update geddy to version = 13.0.8...
Symlink Arbitrary File Overwrite in tar
Versions of tar prior to 2.0.0 are affected by an arbitrary file write vulnerability. The vulnerability occurs because tar does not verify that extracted symbolic links to not resolve to targets outside of the extraction root directory. Recommendation Update to version 2.0.0 or later...
DSA-4002-1 mysql-5.5 - security update
Bulletin has no description...
DSA-3999-1 wpa - security update
Bulletin has no description...
DLA-1124-1 dnsmasq - security update
Bulletin has no description...
DSA-3987-1 firefox-esr - security update
Bulletin has no description...
DLA-1110-1 samba - security update
Bulletin has no description...
DSA-3983-1 samba - security update
Bulletin has no description...
DLA-1102-1 apache2 - security update
Bulletin has no description...
DSA-3977-1 newsbeuter - security update
Bulletin has no description...
DSA-3974-1 tomcat8 - security update
Bulletin has no description...
SUSE-SU-2017:2355-1 Security update for postgresql94
This update for postgresql94 fixes the following issues: CVE-2017-7547: Further restrict visibility of pgusermappings.umoptions, to protect passwords stored as user mapping options. bsc1051685 CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. bsc1051684...
DLA-1085-1 libidn2-0 - security update
Bulletin has no description...
DLA-1073-1 openjdk-7 - security update
Bulletin has no description...
DLA-1071-1 qemu-kvm - security update
Bulletin has no description...
DLA-1057-1 libraw - security update
Bulletin has no description...
DSA-3925-1 qemu - security update
Bulletin has no description...
DSA-3923-1 freerdp - security update
Bulletin has no description...