Pritunl-client Backlink Vulnerability

Pritunl-client is an open source OpenVPN client application from US-based Pritunl. A backlink vulnerability exists in pritunl electron client versions 1.0.1116.6 through v1.2.2550.20, which originates from an arbitrary file write. An attacker can exploit this vulnerability to execute code with ro...

@adobe/aem-site-template-builder (>=0.1.7 <=0.1.8), alexa-scripts (>=0.2.0 <=0.3.4) +4 more potentially affected by unknown CVE via bestzip (>=1.1.3 <=2.1.6)

bestzip NPM version =1.1.3, =0.1.7, =0.2.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-4QQC-MP5F-CCV4...

httpd: mod_http2: read-after-free on a string compare

A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly...

@aerogear/voyager-metrics (>=0.7.2-dev.409.01ecc9f.0 <=0.7.2-dev.411.7aaa5a6.0), @aerogear/voyager-server (>=0.7.2-dev.409.01ecc9f.0 <=0.9.1-dev.430.0433c35.0) +41 more potentially affected by unknown CVE via apollo-server (>=0.1.5 <=2.14.1)

apollo-server NPM version =0.1.5, =0.7.2-dev.409.01ecc9f.0, =0.7.2-dev.409.01ecc9f.0, =2018.8.28-0, =1.0.0, =0.10.0, =0.0.9, =0.0.11, =2.0.0-rc.15, =0.0.0, =1.3.1, =4.0.0-alpha-0b0eefe.499, =4.0.1-beta.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W42G-7VFC-XF37...

ASSA ABLOY Yale WIPC-301W Operating System Command Injection Vulnerability

The ASSA ABLOY Yale WIPC-301W is a home webcam from the Swedish ASSA ABLO Group. A security vulnerability exists in the ASSA ABLOY Yale WIPC-301W versions 2.x.2.29 through 2.x.2.43p1. An attacker can exploit the vulnerability to inject commands...

adversarial-labeller (=0.1.8), alo7-airflow (>=1.10.0 <=1.10.0.7) +122 more potentially affected by CVE-2020-6817 via bleach (>=1.2.2 <=3.1.3)

bleach PYPI version =1.2.2, =1.10.0, =0.1.0, =0.0.6, =0.3.0, =0.0.9, =0.3.4, =0.0.5, =0.1.0rc1, =0.1.3, =0.0.1, =0.2.1, =0.4.3 - dbx-deploy =0.6.1 and more Source cves: CVE-2020-6817 Source advisory: OSV:PYSEC-2020-340...

django-aesfield (=3.0.0), django-autoconfig (=0.8.0) +11 more potentially affected by CVE-2019-14234 via django (>=2.1.0 <=2.1.10)

django PYPI version =2.1.0, =0.1.0, =0.1.0, =0.3.0, =1.7.3, =0.0.3, =1.1.0, =0.1.2, =1.0.0rc2, =0.1.0, =0.2.0.dev2 Source cves: CVE-2019-14234 Source advisory: OSV:PYSEC-2019-13...

amethyst_derive (>=0.4.0 <=0.5.0), amethyst_test (>=0.1.0 <=0.3.0) +80 more potentially affected by unknown CVE via boxfnonce (>=0.0.3 <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.1.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

easyfacenet (>=1.0.4 <=1.0.5), entity-embeddings-categorical (>=0.6.4 <=0.6.7) +14 more potentially affected by CVE-2018-8825 via tensorflow (>=1.5.0 <=1.7.0)

tensorflow PYPI version =1.5.0, =1.0.4, =0.6.4, =0.0.1, =1.1.0, =0.6.0.2, =2.0.4, =1.3.6, =0.1.1, =0.1.0, =0.12.0, =0.7.2, =0.1.2, =0.4.0 and more Source cves: CVE-2018-8825 Source advisory: OSV:GHSA-FRXX-2M33-6WCR...

DEBIAN-CVE-2019-10894

In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gssapi.c by ensuring that a valid dissector is called...

spice: Off-by-one error in array access in spice/server/memslot.c

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers...

IBM Security Access Manager Application Control Bypass Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. An application control bypass vulnerability exists in IBM Security Access Manager...

arango-orm (>=0.4.0 <=0.4.2), bg (>=1.2.0 <=1.9.1) +24 more potentially affected by CVE-2018-17175 via marshmallow (>=0.2.1 <=2.15.0)

marshmallow PYPI version =0.2.1, =0.4.0, =1.2.0, =0.0.65.dev0, =0.10.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =6.0.1, =6.1.2 - plume =0.1.0 and more Source cves: CVE-2018-17175 Source advisory: OSV:GHSA-9Q2P-FJ49-VPXJ...

PhonePe Information Disclosure Vulnerability

PhonePe wallet a.k.a. com.PhonePe.app application for Android is an Android-based cashless payment application by Phonepe Private India. A security vulnerability exists in versions 3.0.6 through 3.3.26 of the PhonePe Wallet application for Android-based platforms. The vulnerability can be exploit...

CVE-2017-8985

HPE XP Storage using Hitachi Global Link Manager HGLM has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00...

Newsbeuter Remote Command Execution Vulnerability

Newsbeuter is an open source RSS/Atom reader for text terminals running on Unix-like operating systems such as Linux, FreeBSD, and Mac OS X. It can be used in a variety of applications, such as mobile phones, mobile devices, and mobile phones. A security vulnerability exists in the blog playback...

PT-2013-1816 · Red Hat · Red Hat Jboss Enterprise Application Platform +1

Name of the Vulnerable Software and Affected Versions: JBoss Enterprise Application Platform EAP versions 4.3.0 CP10 through 6.0.1 JBoss Enterprise Web Platform EWP version 5.2.0 Description: The default configuration of the LdapLoginModule and LdapExtLoginModule modules allows remote attackers t...

krb5: incorrect acceptance of certain checksums (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

DEBIAN-CVE-2009-1791

Heap-based buffer overflow in aiffreadheader in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via an AIFF file with an invalid header value...

2019-09 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 (KB4516551)

2019-09 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 KB4516551...