Amazon Linux 2 : kernel (ALAS-2019-1280)

A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a denial-of-service. CVE-2018-93...

Amazon Linux AMI : kernel (ALAS-2019-1280)

It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests.CVE-2018-15594 A buffer overflow due to a singed-unsigned...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1919)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The xfsbmapextentstobtree function in fs/xfs/libxfs/xfsbmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service...

Medium: kernel

Issue Overview: It was found that paravirtpatchcall/jump functions in the arch/x86/kernel/paravirt.c in the Linux kernel mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtualized guests.CVE-2018-15594 A buffer overflow due to a...

Medium: kernel

Issue Overview: A buffer overflow due to a singed-unsigned comparsion was found in hidpprocessreport in the net/bluetooth/hidp/core.c in the Linux kernel. The buffer length is an unsigned int but gets cast to a signed int which in certain conditions can lead to a system panic and a...

sfb-v2.swirl24.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-961868 Security Researcher Renzi Helped patch 6742 vulnerabilities Received 8 Coordinated Disclosure badges Received 36 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting sfb-v2.swirl24.de website and...

CVE-2019-5475

CVE-2019-5475 is an OS command injection in the Nexus Yum Repository Plugin (Nexus Repository Manager) that can lead to Remote Code Execution. The vulnerability occurs in the Yum: Configuration capability when the capability’s payload data is not properly sanitized, allowing an attacker with admi...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

Information disclosure

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Kimai v2 before 1.1 has XSS via a timesheet description...

CVE-2019-15481

Affected product: Kimai v2 prior to 1.1. The vulnerability is an XSS flaw in the timesheet description field, where unescaped user input can be rendered in the UI. Root cause: lack of proper escaping/validation of the timesheet description leading to script injection. Impact: cross-site scripting...

PT-2019-14210

Name of the Vulnerable Software and Affected Versions Kimai v2 version 1.0 Description The issue allows for XSS via a timesheet description. Recommendations For Kimai v2 version 1.0, update to version 1.1 or later to resolve the issue...

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

CVE-2019-0338: Exposure of Sensitive Information to an Unauthorized Actor

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...

PT-2019-5669

Name of the Vulnerable Software and Affected Versions SAP Gateway versions 750 through 753 Description The issue is related to the improper setting of HTTP Header attributes cache-control and pragma during an OData V2/V4 request, allowing an attacker to access restricted information. This results...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

PT-2019-6457

Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to an out-of-bounds read and panic in the ptlrpc module of the Lustre file system. This occurs due to the lack of validation for specific fields of packets sent by a...