SUSE-SU-2020:2443-1 Security update for squid

This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply bsc1175671. - CVE-2020-15811: Improve Transfer-Encoding handling bsc1175665. - CVE-2020-15810: Enforce token characters for field-name bsc1175664...

OPENSUSE-SU-2020:1320-1 Security update for opera

This update for opera fixes the following issues: Update to version 70.0.3728.133 - CHR-8053 Update chromium on desktop-stable-84-3728 to 84.0.4147.125 - DNA-87289 Crash at views::NativeWidgetMacNSWindowHost:: OnNativeViewHostDetachviews::View const - DNA-87831 Linux Sidebar panel cannot be pinne...

Command Injection

Overview json is a 'json' command tool for massaging and processing JSON on the command line. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbritary commands using the parseLookup function. PoC const json = require'json'; res =...

Improper Input Validation

Overview solidusfrontend is a cart and storefront for the Solidus e-commerce project. Affected versions of this package are vulnerable to Improper Input Validation. It allows a malicious customer to craft request data with parameters that allow changing the address of the current order without...

PT-2020-14197 · Coreos +1 · Etcd +1

Name of the Vulnerable Software and Affected Versions: etcd versions prior to 3.3.23 etcd versions prior to 3.4.10 Description: The issue allows for very short passwords, such as those with a length of one, which may enable an attacker to guess or brute-force users' passwords with little...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2020-8559)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes API server that could enable a privilege escalation from a compromised node CVE-2020-8559 Vulnerability Details CVEID: CVE-2020-8559 Description: Kubernetes kube-apiserver could allow a remote...

Input validation

Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all...

GHSA-P8C3-7RJ8-Q963 ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign

Impact Jsrsasign supports ECDSA signature validation which signature value is represented by ASN.1 DER encoding. This vulnerablity may accept a wrong ASN.1 DER encoded ECDSA signature such as: - wrong multi-byte ASN.1 length of TLV ex. 0x820045 even though 0x45 is correct - prepending zeros with...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview github.com/unknwon/cae/tz is a package that provides archiving functionality for .tar.gz archives. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. The ExtractTo function doesn't securely escape file paths in zip archives which...

Man-in-the-Middle (MitM)

Overview em-http-request is an EventMachine based, async HTTP Request client. Affected versions of this package are vulnerable to Man-in-the-Middle MitM. The library eventmachine is being used in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the...

GHSA-Q4M3-2J7H-F7XW Cross-Site Scripting in jquery

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove HTML tags that contain a whitespace character, i.e: , which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a...

HTTP Request Smuggling

Overview netius is a Python network library that can be used for the rapid creation of asynchronous non-blocking servers and clients. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure by Bypassing Strong Parameters. Specifically the return value of each, or eachvalue, or eachpair will return the underlying "untrusted" hash of data that was read from the parameters. Remediation Upgrade actionpack ...

HTTP Request Smuggling

Overview iodine is a fast HTTP / Websocket Server with built-in Pub/Sub support with or without Redis, static file support and many other features, optimized for Ruby MRI on Linux / BSD / macOS. Affected versions of this package are vulnerable to HTTP Request Smuggling. HTTP pipelining issues and...

OPENSUSE-SU-2020:0635-1 Security update for opera

This update for opera fixes the following issues: Opera was updated to version 68.0.3618.63 - CHR-7889 Update chromium on desktop-stable-81-3618 to 81.0.4044.122 - CHR-7896 Update chromium on desktop-stable-81-3618 to 81.0.4044.129 - DNA-85287 Set standard spacing for Yandex prompt - DNA-85416 Ma...

PT-2020-6845 · Yii2 Gii · Yii2 Gii

Name of the Vulnerable Software and Affected Versions: Yii2 Gii versions prior to 2.2.2 Description: The issue allows remote attackers to execute arbitrary code via the messageCategory field in Generator.php. This can be done by embedding arbitrary PHP code into the model file. The vulnerability ...

Authentication Bypass

Overview sorcery is a package that provides common authentication needs such as signing in/out, activating by email and resetting password. Affected versions of this package are vulnerable to Authentication Bypass. There is a brute force vulnerability when using password authentication via Sorcer...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. Remediation Upgrade re2c to version 2.0.3 or higher. References - GitHub Commit...

Jira uses vulnerable jQuery version CVE-2015-9251

h3. Issue Summary jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. Jira uses jQuery 2.2.4 as of Jira 8.8.0 https://nvd.nist.gov/vuln/detail/CVE-2015-92...

PT-2020-15383 · Jenkins · Jenkins Gatling Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Gatling Plugin versions 1.2.7 and earlier Description: The issue results in a cross-site scripting XSS vulnerability, which is exploitable by users able to change report content. This occurs because the plugin prevents...