Lucene search
+L
MageiaMost viewed

6145 matches found

Mageia
Mageia
•added 2015/04/15 9:01 a.m.•46 views

Updated asterisk packages fix CVE-2015-3008

Updated asterisk packages fix security vulnerability: When Asterisk registers to a SIP TLS device and verifies the server, Asterisk will accept signed certificates that match a common name other than the one Asterisk is expecting if the signed certificate has a common name containing a null byte...

4.3CVSS7.1AI score0.46156EPSS
SaveExploits0References4
Mageia
Mageia
•added 2015/02/06 4:51 p.m.•46 views

Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 11.2.202.442 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities that could lead to code execution...

10CVSS8.6AI score0.95683EPSS
SaveExploits13References3
Mageia
Mageia
•added 2015/01/07 4:32 p.m.•46 views

Updated ettercap packages fix security vulnerabilities

Updated ettercap package fixes security vulnerabilities: Heap-based buffer overflow in the dissectorpostgresql function in dissectors/ecpostgresql.c in Ettercap before 8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value...

7.5CVSS8AI score0.12674EPSS
SaveExploits4References2
Mageia
Mageia
•added 2015/01/07 3:14 p.m.•46 views

Updated libpng packages fix CVE-2014-9495

Updated libpng packages fix security vulnerability: libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in pngcombinerow when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary attacker-controlled dat...

10CVSS7.3AI score0.04047EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/12/31 12:28 p.m.•46 views

Updated castor packages fix CVE-2014-3004

Updated castor packages fix security vulnerability: The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document CVE-2014-3004...

4.3CVSS8.7AI score0.07857EPSS
SaveExploits4References2
Mageia
Mageia
•added 2014/12/26 5:04 p.m.•46 views

Updated erlang packages fix security vulnerabilities

Updated erlang packages fixes security vulnerability: An FTP command injection flaw was found in Erlang's FTP module. Several functions in the FTP module do not properly sanitize the input before passing it into a control socket. A local attacker can use this flaw to execute arbitrary FTP command...

7.5CVSS9.7AI score0.02193EPSS
SaveExploits1References3
Mageia
Mageia
•added 2014/12/23 8:35 p.m.•46 views

Updated subversion packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way moddavsvn handled REPORT requests. A remote, unauthenticated attacker could use a crafted REPORT request to crash moddavsvn CVE-2014-3580. A NULL pointer dereference flaw was found in the way moddavsvn handled URIs for virtual transaction names...

5CVSS9AI score0.11121EPSS
SaveExploits0References5
Mageia
Mageia
•added 2014/12/23 8:35 p.m.•46 views

Updated git packages fix security vulnerability

It was reported that git, when used as a client on a case-insensitive filesystem, could allow the overwrite of the .git/config file when the client performed a "git pull". Because git permitted committing .Git/config or any case variation, on the pull this would replace the user's .git/config. If...

9.8CVSS9.5AI score0.75597EPSS
SaveExploits5References3
Mageia
Mageia
•added 2014/12/19 3:06 p.m.•46 views

Updated pcre packages fix security vulnerability

A flaw was found in the way PCRE handled certain malformed regular expressions. This issue could cause an application linked against PCRE to crash while parsing malicious regular expressions CVE-2014-8964...

5CVSS7.7AI score0.06505EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/12/03 7:27 p.m.•46 views

Updated libreoffice packages fix security vulnerability

"Document as E-mail" vulnerability bnc900218. It was discovered that LibreOffice incorrectly handled the Impress remote control port. An attacker could possibly use this issue to cause Impress to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2014-3693...

7.5CVSS7.6AI score0.04955EPSS
SaveExploits0References5
Mageia
Mageia
•added 2014/11/14 12:57 a.m.•46 views

Updated curl packages fix CVE-2014-3707

Updated curl packages fix security vulnerability: Symeon Paraschoudis discovered that the curleasyduphandle function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires...

4.3CVSS9.2AI score0.05121EPSS
SaveExploits0References3
Mageia
Mageia
•added 2014/10/09 2:06 p.m.•46 views

Updated cacti package fixes multiple security vulnerabilities

Updated cacti package fixes security vulnerabilities: Multiple security issues cross-site scripting, missing input sanitising and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems CVE-2014-5025, CVE-2014-5026, CVE-2014-5261, CVE-2014-5262...

7.5CVSS9.1AI score0.10773EPSS
SaveExploits3References2
Mageia
Mageia
•added 2014/09/22 8:31 a.m.•46 views

Updated phpmyadmin package fix CVE-2014-6300

Updated phpmyadmin package fixes security vulnerability: In phpMyAdmin before 4.1.14.4, by deceiving a logged-in user to click on a crafted URL, it is possible to perform remote code execution and in some cases, create a root account due to a DOM based XSS vulnerability in the micro history featu...

4.3CVSS6.7AI score0.01862EPSS
SaveExploits0References2
Mageia
Mageia
•added 2014/08/25 8:44 a.m.•46 views

Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities

Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities: The Jakarta Commons HttpClient component may be susceptible to a 'Man in the Middle Attack' due to a flaw in the default hostname verification during SSL/TLS when a specially crafted server side...

5.8CVSS6.3AI score0.09149EPSS
SaveExploits1References3
Mageia
Mageia
•added 2014/08/21 9:36 a.m.•46 views

Updated subversion packages fix security vulnerabilities

Updated subversion packages fix security vulnerabilities: Ben Reser discovered that Subversion did not correctly validate SSL certificates containing wildcards. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communicatio...

4CVSS7.9AI score0.07396EPSS
SaveExploits0References6
Mageia
Mageia
•added 2014/08/05 8:08 p.m.•46 views

Updated mediawiki packages fix security vulnerabilities

MediaWiki before 1.23.2 is vulnerable to JSONP injection in Flash CVE-2014-5241, XSS in mediawiki.page.image.pagination.js CVE-2014-5242, and clickjacking between OutputPage and ParserOutput CVE-2014-5243. This update provides MediaWiki 1.23.2, fixing these and other issues...

6.8CVSS9.1AI score0.02074EPSS
SaveExploits3References3
Mageia
Mageia
•added 2014/07/09 11:21 p.m.•46 views

Updated flash-player-plugin packages fix multiple vulnerabilities

Adobe Flash Player 11.2.202.394 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update includes additional validation checks to ensure that Flash Player rejects malicious content fr...

7.5CVSS6.6AI score0.23024EPSS
SaveExploits4References2
Mageia
Mageia
•added 2014/06/18 6:02 p.m.•46 views

Updated qt3 packages fix security vulnerabilities

Updated qt3 packages fix security vulnerabilities: QXmlSimpleReader in Qt versions prior to 5.2 supports expansion of internal entities in XML documents without placing restrictions to ensure the document does not cause excessive memory usage. If an application using this API processes untrusted...

5CVSS7.1AI score0.03957EPSS
SaveExploits0References7
Mageia
Mageia
•added 2014/06/02 6:44 p.m.•46 views

Updated libtasn1 packages fix CVE-2014-3467-9

Updated libtasn1 packages fix security vulnerabilities: Multiple buffer boundary check issues were discovered in libtasn1 library, causing it to read beyond the boundary of an allocated buffer. An untrusted ASN.1 input could cause an application using the library to crash CVE-2014-3467. It was...

7.5CVSS6AI score0.068EPSS
SaveExploits0References5
Mageia
Mageia
•added 2014/02/27 9:58 p.m.•46 views

Updated subversion packages fix CVE-2014-0032

Updated subversion packages fix security vulnerability: The moddavsvn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service crash via an OPTIONS request CVE-2014-0032. The package has been patched to correct this issue...

4.3CVSS8.3AI score0.11052EPSS
SaveExploits0References4
Mageia
Mageia
•added 2013/11/22 6:49 p.m.•46 views

Updated qemu package fixes security vulnerability

A buffer overflow flaw was found in the way QEMU processed the SCSI "REPORT LUNS" command when more than 256 LUNs were specified for a single SCSI target. A privileged guest user could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code...

7.2CVSS2.6AI score0.00434EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/09/19 9:35 a.m.•46 views

Updated wireshark package fixes security vulnerabilities

The ASSA R3 dissector could go into an infinite loop CVE-2013-5719. The RTPS dissector could overflow a buffer CVE-2013-5720. The MQ dissector could crash CVE-2013-5721. The LDAP dissector could crash CVE-2013-5722. The Netmon file parser could crash wpna-sec-2013-60...

5CVSS3.7AI score0.0284EPSS
SaveExploits1References10
Mageia
Mageia
•added 2013/09/19 9:32 a.m.•46 views

Updated freeswitch packages fix security vulnerability

In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible CVE-2013-2238...

6.8CVSS3.8AI score0.02708EPSS
SaveExploits1References3
Mageia
Mageia
•added 2013/08/30 5:30 p.m.•46 views

Updated php packages fix CVE-2013-4248 and prevent the two gd packages being installed at once

Updated php packages fix security vulnerability: The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

4.3CVSS2.9AI score0.03588EPSS
SaveExploits0References5
Mageia
Mageia
•added 2013/08/26 7:50 p.m.•46 views

Updated lcms package fixes security vulnerability

Three buffer overflows in Little CMS version 1.19 that could possibly be exploited through user input CVE-2013-4276...

4.3CVSS4.8AI score0.03502EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/08/22 6:01 p.m.•46 views

Updated rubygem-passenger package fixes CVE-2013-4136 & apache module

Updated rubygem-passenger package fixes security vulnerability: It was reported that Phusion Passenger would reuse existing server instance directories temporary directories which could cause Passenger to remove or overwrite files belonging to other instances CVE-2013-4136. Additionally, the...

4.4CVSS2.1AI score0.00329EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/08/17 8:39 a.m.•46 views

Updated chromium-browser-stable packages fix security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Karthik Bhargavan discovered a way to bypass the Same Origin Policy in frame handling CVE-2013-2881. Cloudfuzzer discovered a type confusion issue in the V8 javascript library CVE-2013-2882. Cloudfuzzer discovered a...

7.5CVSS1.4AI score0.0287EPSS
SaveExploits5References5
Mageia
Mageia
•added 2013/07/21 9:25 a.m.•46 views

Updated python-suds package fixes security vulnerability

An insecure temporary directory use flaw was found in the way python-suds performed initialization of its internal file-based URL cache predictable location was used for directory to store the cached files. A local attacker could use this flaw to conduct symbolic link attacks, possibly leading to...

1.2CVSS1.4AI score0.00558EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/07/21 8:57 a.m.•46 views

Updated mediawiki packages fix security vulnerability

MediaWiki user Marco discovered that security checks for file uploads were not being run when the file was uploaded in chunks through the API. This option has been available to users who can upload files since MediaWiki 1.19 CVE-2013-2114...

6.8CVSS3AI score0.02344EPSS
SaveExploits0References3
Mageia
Mageia
•added 2013/07/18 7:11 a.m.•46 views

Updated php packages fix CVE-2013-4113

Fixed PHP bug 65236 heap corruption in xml parser CVE-2013-4113. Additionally the php-timezonedb packages has been upgraded to the latest version 2013.4...

6.8CVSS2.4AI score0.05186EPSS
SaveExploits0References4
Mageia
Mageia
•added 2013/07/06 2:12 p.m.•46 views

Updated axis package fixes security vulnerability

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name CVE-2012-578...

5.8CVSS2.8AI score0.05722EPSS
SaveExploits1References2
Mageia
Mageia
•added 2013/06/19 10:11 a.m.•46 views

Updated apache packages fix security vulnerabilities

It was found that modrewrite did not filter terminal escape sequences from its log file. If modrewrite was configured with the RewriteLog directive, a remote attacker could use specially-crafted HTTP requests to inject terminal escape sequences into the modrewrite log file. If a victim viewed the...

5.1CVSS1.3AI score0.24886EPSS
SaveExploits2References3
Mageia
Mageia
•added 2026/05/07 5:06 a.m.•45 views

Updated libexif packages fix security vulnerabilities

CVE-2026-32775: libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow. CVE-2026-40385: In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon...

7.8CVSS5.8AI score0.00193EPSS
SaveExploits1References2
Mageia
Mageia
•added 2024/11/09 5:17 a.m.•45 views

Updated quictls packages fix security vulnerability

Invalid low-level GF2^m parameters can lead to an OOB memory access. CVE-2024-9143...

4.3CVSS7.3AI score0.05842EPSS
SaveExploits0References2
Mageia
Mageia
•added 2024/10/04 5:27 a.m.•45 views

Updated hostapd & wpa_supplicant packages fix security vulnerability

The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loop. Enterprise 802.1X/EAP, Mesh AMPE, or FILS, aka an "SSID Confusion" issue. This occurs because the SSID is not always used to derive th...

7.4CVSS7.2AI score0.00716EPSS
SaveExploits0References2
Mageia
Mageia
•added 2024/06/03 6:30 p.m.•45 views

Updated microcode packages fix security vulnerabilities

The updated package fixes security vulnerabilities: Hardware logic contains race conditions in some IntelR Processors may allow an authenticated user to potentially enable partial information disclosure via local access. CVE-2023-45733 Sequence of processor instructions leads to unexpected behavi...

8.2CVSS6.3AI score0.00379EPSS
SaveExploits0References3
Mageia
Mageia
•added 2024/05/25 11:39 p.m.•45 views

Updated mariadb packages fix security vulnerability and bugs

Additional bugs were fixed in the following components: InnoDB Spider Aria Backup JSON Optimization & Tuning Plugins Galera Scripts & Clients Server For the details see the vendor site...

4.9CVSS7.3AI score0.00424EPSS
SaveExploits0References3
Mageia
Mageia
•added 2024/05/10 4:09 p.m.•45 views

Updated libnbd packages fix security vulnerability

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

6.5CVSS7.1AI score0.00746EPSS
SaveExploits1References2
Mageia
Mageia
•added 2024/01/14 10:23 p.m.•45 views

Updated gnutls packages fix a security vulnerability

The updated packages fix a security vulnerability: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5 padding. CVE-2023-5981...

5.9CVSS6.8AI score0.01267EPSS
SaveExploits0References3
Mageia
Mageia
•added 2023/12/08 10:55 a.m.•45 views

Updated firefox packages fix security vulnerabilities

The updated packages fix security vulnerabilities. Out-of-bound memory access in WebGL2 blitFramebuffer. CVE-2023-6204 Use-after-free in MessagePort::Entangled. CVE-2023-6205 Clickjacking permission prompts using the fullscreen transition. CVE-2023-6206 Use-after-free in...

8.8CVSS8.1AI score0.01406EPSS
SaveExploits0References4
Mageia
Mageia
•added 2023/10/30 11:05 p.m.•45 views

Updated chromium-browser-stable packages fix bugs including security vulnerabilities

The chromium-browser-stable package has been updated to the 118.0.5993.117 release, fixing bugs and 3 vulnerabilities, together with 118.0.5993.88; some of them are listed below: High CVE-2023-5472: Use after free in Profiles...

8.8CVSS7.1AI score0.01245EPSS
SaveExploits0References3
Mageia
Mageia
•added 2023/07/07 5:54 a.m.•45 views

Updated glances packages fix security vulnerability

Regular Expression Denial of Service ReDoS in angular CVE-2022-25844...

7.5CVSS7AI score0.04927EPSS
SaveExploits1References2
Mageia
Mageia
•added 2023/05/22 3:30 p.m.•45 views

Updated mariadb packages fix security vulnerability

It is possible for function spiderdbmbase::printwarnings to dereference a null pointer. CVE-2022-47015...

6.5CVSS7AI score0.01486EPSS
SaveExploits0References2
Mageia
Mageia
•added 2023/02/27 8:27 p.m.•45 views

Updated python-cryptography packages fix security vulnerability

Cipher.updateinto would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects such as 'bytes' to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an...

6.5CVSS6.9AI score0.01301EPSS
SaveExploits1References2
Mageia
Mageia
•added 2023/02/27 8:27 p.m.•45 views

Updated sofia-sip packages fix security vulnerability

The configsortlist function is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow and thus may cause a denial of service. CVE-2022-47516...

7.5CVSS3.9AI score0.01647EPSS
SaveExploits1References2
Mageia
Mageia
•added 2022/12/17 6:48 p.m.•45 views

Updated freerdp packages fix security vulnerability

Affected versions of FreeRDP are missing input length validation in 'drive' channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. CVE-2022-41877...

4.6CVSS5.5AI score0.00758EPSS
SaveExploits0References2
Mageia
Mageia
•added 2022/12/13 10:09 p.m.•45 views

Updated rxvt-unicode packages fix security vulnerability

rxvt-unicode 9.25 and 9.26 are vulnerable to remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. CVE-2022-4170...

9.8CVSS2.9AI score0.02058EPSS
SaveExploits0References2
Mageia
Mageia
•added 2022/11/17 8:45 p.m.•45 views

Updated systemd packages fix security vulnerability

buffer overrun in formattimespan function bsc1204968 CVE-2022-3821 Import commit 0cd50eedcc0692c1f907b24424215f8db7d3b428 0469b9f2bc pstore: do not try to load all known pstore modules ad05f54439 pstore: Run after modules are loaded ccad817445 core: Add trigger limit for path units 281d818fe3...

5.5CVSS0.7AI score0.0042EPSS
SaveExploits1References3
Mageia
Mageia
•added 2022/11/08 7:44 p.m.•45 views

Updated libtasn1 packages fix security vulnerability

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder. CVE-2021-46848...

9.1CVSS2.3AI score0.02192EPSS
SaveExploits1References4
Mageia
Mageia
•added 2022/10/08 8:22 p.m.•45 views

Updated enlightenment packages fix security vulnerability

Updated enlightenment package to fix the security vulnerability, CVE-2022-37706 that would allow an user to gain root privileges...

7.8CVSS3.5AI score0.05531EPSS
SaveExploits15References3
Total number of security vulnerabilities5000