GHSA-3J7M-HMH3-9JMP Cross-Site Scripting in sanitize-html

Affected versions of sanitize-html do not sanitize input recursively, which may allow an attacker to execute arbitrary Javascript. Recommendation Update to version 1.4.3 or later...

PT-2020-18418 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.4 P11 Description: The issue concerns a stored cross-site scripting vulnerability in the Security Console of RSA Authentication Manager. A malicious administrator with advanced privileges could...

PT-2020-2648 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 5.2.40 Oracle VM VirtualBox versions prior to 6.0.20 Oracle VM VirtualBox versions prior to 6.1.6 Description: The issue is related to insufficient input validation in the Core component of Oracle VM...

PT-2020-3784 · Openresty +2 · Openresty +2

Name of the Vulnerable Software and Affected Versions: OpenResty versions prior to 1.15.8.4 Description: The issue is related to HTTP request smuggling in the ngx http lua subrequest.c component of the OpenResty web server. This is due to inconsistent interpretation of HTTP requests. The...

PT-2020-10612 · Varnish +6 · Varnish Cache +6

Name of the Vulnerable Software and Affected Versions: Varnish Cache versions prior to 6.0.5 LTS Varnish Cache versions 6.1.x through 6.2.1 Varnish Cache versions 6.3.x through 6.3.0 Description: An issue was discovered in Varnish Cache where it does not clear a pointer between the handling of on...

Veeam Backup for Microsoft 365 4b cumulative patch KB3119

Challenge Veeam Backup for Microsoft 365 4b cumulative patch KB3119. Please note that Veeam Backup for Microsoft 365 4с is now available and contains all the resolved issues from Veeam Backup for Microsoft 365 4b. Cause Please confirm you are running Veeam Backup for Microsoft 365 4b build...

OPENSUSE-SU-2020:0402-1 Security update for opera

This update for opera fixes the following issues: Update to version 67.0.3575.97 - DNA-84063 Open URL in new tab with ‘Go to web address’ in search/copy popup and right mouse click context menu - DNA-84780 Search in Search and Copy popup opens tab in wrong position from popup window - DNA-84786...

PT-2020-18413 · Rsa · Emc Rsa Authentication Manager

Name of the Vulnerable Software and Affected Versions: RSA Authentication Manager versions prior to 8.4 P10 Description: The issue concerns a stored cross-site scripting vulnerability in the Security Console of RSA Authentication Manager. A malicious administrator with advanced privileges could...

PT-2020-6203 · Graphicsmagick +4 · Graphicsmagick +4

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions prior to 1.3.32 Description: The issue is related to information disclosure, allowing remote attackers to read arbitrary files via a crafted image because of the TranslateTextEx function for SVG. This can lead to...

PT-2020-2412 · Php +8 · Php +8

Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.28 PHP versions 7.3.x through 7.3.15 PHP versions 7.4.x through 7.4.3 Description: The issue is related to the implementation of the get headers function in PHP, which does not properly check user-supplied URLs...

PT-2020-11968 · WordPress · Popup Builder

Name of the Vulnerable Software and Affected Versions: popup-builder plugin versions prior to 3.64.1 Description: The issue allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST reques...

MGASA-2020-0124 Updated pcre packages fix security vulnerability

Updated pcre packages fix security vulnerabilities: The pcre package has been updated to version 8.44, fixing an integer overflow and NULL pointer dereference, as well as other bugs. See the upstream changelog for details...

PT-2020-20269 · Alfresco · Alfresco Community +1

Name of the Vulnerable Software and Affected Versions: Alfresco Enterprise versions prior to 5.2.7 Alfresco Community versions prior to 6.2.0 rb65251d6-b368 Description: The issue allows for XSS via a user profile photo. This can be achieved by including a SCRIPT element in an SVG document...

SUSE-SU-2020:0527-1 Security update for mariadb

This update for mariadb fixes the following issues: MariaDB was updated to version 10.0.40-3 bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

Red Hat OpenShift Container Platform release 3.11.170 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

SUSE-SU-2020:0412-1 Security update for dpdk

This update for dpdk to version 18.11.3 fixes the following issues: dpdk was updated to 18.11.3 Security issue fixed: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. Other issues addressed: - Changed to multibuild...

PT-2021-4230 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.92 Description: The issue is related to the disclosure of protected information in the Linux kernel, specifically in the BPF protocol. It allows an attacker with a local account to leak information about...

Citrix Workspace app for Android will not connect to stores with untrusted certificates

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Note:- Starting with app version 20.3.0, the Citrix Workspace app for Android will not allow access ...

PT-2020-11250 · Wowza · Wowza Streaming Engine

Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions 4.8.0 and earlier Wowza Streaming Engine versions 4.7.7 through 4.7.8 Description: The issue allows an administrator to be tricked into making unwanted changes, such as adding another admin user, by following a...

PT-2020-20126 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.15 Description: An issue was discovered that allows XSS attacks due to inadequate escaping of usernames in com actionlogs. Recommendations: For versions prior to 3.9.15, update to version 3.9.15 or later to resol...