[SECURITY] [DSA 4889-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4889-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 10, 2021 https://www.debian.org/security/faq -...

VIGRA 安全漏洞

Hans Meine vigra is a Hans Meine open source application. It is a computer vision library. A security vulnerability exists in VIGRA Computer Vision Library Version-1-11-1, which stems from the inclusion of a segmentation error in impex, a crafted file that can lead to a denial of service...

Debian DSA-4885-1 : netty - security update

Multiple security issues were discovered in Netty, a Java NIO client/server framework, which could result in HTTP request smuggling, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Integer overflow

An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request...

CVE-2021-21331

The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client. The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive...

Debian DLA-2578-1 : thunderbird security update

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For Debian 9 stretch, these problems have been fixed in version 1:78.8.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the detailed...

Design/Logic Flaw

An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names such as constructor or hasOwnProperty to convince the System that the supplied API Key exists...

Debian DLA-2540-1 : python-django security update

It was discovered that there was a potential directory-traversal in Django, a Python-based web development framework. For Debian 9 'Stretch', this problem has been fixed in version 1:1.10.7-2+deb9u10. We recommend that you upgrade your python-django packages. For the detailed security status of...

[SECURITY] [DLA 2504-1] mediawiki security update

Debian LTS Advisory DLA-2504-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 22, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u7 CVE ID : CVE-2020-15005 CVE-2020-35477 CVE-2020-35479 CVE-2020-35480 Multiple security...

Debian DLA-2497-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information leak. For Debian 9 stretch, these problems have been fixed in version 1:78.6.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the...

Debian DLA-2464-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 9 stretch, these problems have been fixed in version 1:78.5.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the detailed security...

Debian DSA-4796-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4796. The text itself is...

Debian DSA-4780-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4780. The text itself is...

Debian DLA-2360-1 : thunderbird security update

Multiple security issues have been found in Thunderbird which could result in the execution of arbitrary code or the unintended installation of extensions. For Debian 9 stretch, these problems have been fixed in version 1:68.12.0-1deb9u1. We recommend that you upgrade your thunderbird packages. F...

PT-2020-14769 · Cisco · Cisco Unified Ip Conference Station 7937G

Name of the Vulnerable Software and Affected Versions: Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7 Description: A privilege escalation issue allows attackers to reset the credentials for the SSH administrative console to arbitrary values. The product is end of life...

Linux: SSH RSAAuthentication

RSAAuthentication: Specifies whether pure RSA authentication is allowed. This option applies to protocol version 1 only. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1

1:2.4.43-alt1 built April 8, 2020 Anton Farygin in task 249454 April 6, 2020 Anton Farygin - 2.4.43 Fixes: CVE-2020-1927, CVE-2020-1934...

Debian DLA-2142-1 : slirp security update

It was discovered that there was a buffer overflow vulnerability in slirp, a SLIP/PPP emulator for using a dial up shell account. This was caused by the incorrect usage of return values from snprintf3. For Debian 8 'Jessie', this issue has been fixed in slirp version 1:1.0.17-7+deb8u2. We recomme...

UBUNTU-CVE-2012-1093

The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation...

elearning-script 1.0 - Authentication Bypass Vulnerability

Exploit for windows platform in category web applications Exploit Title: elearning-script 1.0 - Authentication Bypass Author: riamloo Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script/archive/master.zip Version: 1...