Lucene search
+L
MageiaMost viewed

6218 matches found

Mageia
Mageia
added 2019/08/18 12:39 p.m.47 views

Updated postgresql packages fix security vulnerabilities

Updated postgresql packages fix security vulnerabilities: Given a suitable SECURITY DEFINER function, an attacker can execute arbitrary SQL under the identity of the function owner. An attack requires EXECUTE permission on the function, which must itself contain a function call having inexact...

8.8CVSS3.6AI score0.02188EPSS
SaveExploits0References5
Mageia
Mageia
added 2019/07/10 10:44 a.m.47 views

Updated irssi package fixes security vulnerability

Irssi before 1.0.8 and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server CVE-2019-13045...

8.1CVSS3.3AI score0.03361EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/03/14 9:39 p.m.47 views

Updated gnupg2 packages fix security vulnerability

GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery CSRF vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window...

8.8CVSS4.4AI score0.01041EPSS
SaveExploits1References3
Mageia
Mageia
added 2019/02/14 8:38 a.m.47 views

Updated logback packages fix security vulnerability

It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to...

9.8CVSS6.6AI score0.07501EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/01/30 7:39 p.m.47 views

Updated bluez packages fix security vulnerability

A buffer overflow in pincodereplydump function CVE-2016-9800. A buffer overflow in setextctrl function CVE-2016-9801. A buffer overflow in commandsdump function CVE-2016-9804...

5.3CVSS4AI score0.02923EPSS
SaveExploits3References3
Mageia
Mageia
added 2018/11/15 10:04 p.m.47 views

Updated patch packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way patch processed patch files. An attacker could potentially use this flaw to crash patch by tricking it into processing crafted patches CVE-2018-6951. A double-free flaw was found in the way the patch utility processed patch files. An attacker...

7.5CVSS2AI score0.08427EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/11/11 9:09 p.m.47 views

Updated iniparser packages fix security vulnerability

A flaw was found in iniparser version prior to 4.1. A stack buffer underflow in the function iniparserload in iniparser.c file which can be triggered by parsing a file that containing a zero-byte. This vulnerability may allow an attacker to cause a Denial of Service DoS...

4.9AI score
SaveExploits0References4
Mageia
Mageia
added 2018/10/19 6:00 p.m.47 views

Updated php-smarty packages fix security vulnerability

Smarty 3.1.32 or below is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files CVE-2018-13982...

7.5CVSS5.9AI score0.03463EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/10/19 6:00 p.m.47 views

Updated rust packages fix security vulnerability

Updated rust packages fix security vulnerability The Rust Programming Language Standard Library before version 1.29.1 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in the standard library that can result in buffer overflow. This attack appear to be exploitable via...

9.8CVSS5.1AI score0.02992EPSS
SaveExploits0References1
Mageia
Mageia
added 2018/07/01 5:17 p.m.47 views

Updated ansible packages fix security vulnerability

Ansible prior to 2.4.5 does not honor the nolog task flag for failed tasks. When the nolog flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expose sensitive data in log files and on the terminal of the user...

5.9CVSS1.2AI score0.03113EPSS
SaveExploits0References3
Mageia
Mageia
added 2018/05/17 10:54 a.m.47 views

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities: Mozilla: Memory safety bugs fixed in Firefox ESR 52.8 CVE-2018-5150. Mozilla: Backport critical security fixes in Skia CVE-2018-5183. Mozilla: Use-after-free with SVG animations and clip paths CVE-2018-5154. Mozilla: Use-after-free with SVG...

9.8CVSS2.1AI score0.21036EPSS
SaveExploits5References4
Mageia
Mageia
added 2018/05/12 8:41 a.m.47 views

Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 29.0.0.171 addresses a critical type confusion vulnerability that could lead to arbitrary code execution CVE-2018-4944...

10CVSS3.1AI score0.08804EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/05/04 5:29 p.m.47 views

Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS6AI score0.01837EPSS
SaveExploits0References3
Mageia
Mageia
added 2018/04/30 7:08 p.m.47 views

Updated sox packages fix security vulnerabilities

This update for sox fixes the following security issues: CVE-2017-11332: Fixed the startread function in wav.c, which allowed remote attackers to cause a DoS divide-by-zero via a crafted wav file. CVE-2017-11358: Fixed the readsamples function in hcom.c, which allowed remote attackers to cause a...

7.5CVSS4AI score0.07401EPSS
SaveExploits8References1
Mageia
Mageia
added 2018/03/22 10:39 p.m.47 views

Updated sqlite3 packages fix security vulnerability

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c CVE-2018-8740...

7.5CVSS1.2AI score0.07966EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/03/06 7:55 a.m.47 views

Updated xerces-c packages fix CVE-2017-12627

Updated xerces-c packages fix security vulnerability: The Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while processing the path to the DTD. The bug allows for a denial of service attack in applications that allow DTD processi...

9.8CVSS3.9AI score0.08357EPSS
SaveExploits3References2
Mageia
Mageia
added 2018/01/27 9:19 a.m.47 views

Updated webkit2 packages fix security vulnerabilities

The webkit2 package has been updated to version 2.18.6, fixing several security issues and other bugs...

8.8CVSS3.4AI score0.06414EPSS
SaveExploits4References4
Mageia
Mageia
added 2018/01/25 1:36 p.m.47 views

Updated firefox packages fix security vulnerabilities

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096,...

9.8CVSS4AI score0.0717EPSS
SaveExploits0References5
Mageia
Mageia
added 2018/01/03 3:50 p.m.47 views

Updated perl packages fix security vulnerability

Jakub Wilk reported a heap buffer overflow flaw in the regular expression compiler, allowing a remote attacker to cause a denial of service via a specially crafted regular expression with the case-insensitive modifier CVE-2017-12837. Jakub Wilk reported a buffer over-read flaw in the regular...

9.1CVSS3.8AI score0.06207EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/01/03 2:22 p.m.47 views

Updated jbig2dec packages fix security vulnerability

libjbig2dec.a in Artifex jbig2dec 0.13 has a NULL pointer dereference in the jbig2huffmanget function in jbig2huffman.c. For example, the jbig2dec utility will crash segmentation fault when parsing an invalid file CVE-2017-9216...

6.5CVSS3.7AI score0.03452EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/01/03 2:22 p.m.47 views

Updated awstats packages fix security vulnerability

The cPanel Security Team discovered two path traversal flaws in awstats in the "config" and "migrate" parameters that could be leveraged for unauthenticated remote code execution CVE-2017-1000501...

9.8CVSS4.1AI score0.04352EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/01/01 3:50 p.m.47 views

Updated gstreamer0.10-plugins-ugly/gstreamer1.0-plugins-ugly packages fix security vulnerability

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened CVE-2017-5846, CVE-2017-5847...

7.5CVSS3.9AI score0.03734EPSS
SaveExploits0References3
Mageia
Mageia
added 2017/12/16 11:20 p.m.47 views

Updated lynx package fixes security vulnerability

Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTMLputstring can append a chunk onto itself. CVE-2017-1000211...

5.3CVSS1.8AI score0.01705EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/11/29 6:52 p.m.47 views

Updated thunderbird packages fix security vulnerabilities & bugs

The updated packages fix several bugs and some security issues: Use-after-free of PressShell while restyling layout. CVE-2017-7828 Cross-origin URL information leak through Resource Timing API. CVE-2017-7830 Memory safety bugs fixed in Firefox 57, Firefox ESR 52.5, and Thunderbird 52.5...

10CVSS1.8AI score0.07345EPSS
SaveExploits0References3
Mageia
Mageia
added 2017/11/06 8:22 a.m.47 views

Updated poppler packages fix security vulnerabilities

In Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0 function in SplashOutputDev.cc via a crafted PDF document. CVE-2017-14927 The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an...

8.8CVSS2.8AI score0.02585EPSS
SaveExploits2References6
Mageia
Mageia
added 2017/10/18 8:19 p.m.47 views

Updated ruby packages fix security vulnerabilities

If a malicious format string which contains a precious specifier is passed and a huge minus value is also passed to the specifier, buffer underrun may be caused. In such situation, the result may contains heap, or the Ruby interpreter may crash CVE-2017-0898. If a malicious string is passed to th...

9.8CVSS0.5AI score0.16412EPSS
SaveExploits2References8
Mageia
Mageia
added 2017/10/05 8:08 p.m.47 views

Updated libraw packages fix security vulnerabilities

There is a floating point exception in the kodakradcloadraw function in dcrawcommon.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack. CVE-2017-13735 A Stack-based Buffer Overflow was discovered in xtransinterpolate in internal/dcrawcommon.cpp in LibRaw before 0.18.3. It cou...

9.8CVSS4.1AI score0.04336EPSS
SaveExploits0References7
Mageia
Mageia
added 2017/06/29 9:40 p.m.47 views

Updated libmwaw packages fix security vulnerability

It was discovered that a buffer overflow in libmwaw might result in the execution of arbitrary code if a malformed document is opened CVE-2017-9433...

9.8CVSS3.5AI score0.02276EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/06/14 1:50 p.m.47 views

Updated flash-player-plugin packages fix security vulnerabilities

Adobe Flash Player 26.0.0.126 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves use-after-free vulnerabilities and memory corruption vulnerabilities that could lead to...

10CVSS5.6AI score0.30886EPSS
SaveExploits6References2
Mageia
Mageia
added 2017/03/25 4:56 p.m.47 views

Updated flash-player-plugin packages fix security vulnerability

Updated flash-player-plugin installs latest version for the flash plugin from adobe. See the referenced security bulletin for details...

9.3CVSS3AI score0.0836EPSS
SaveExploits1References2
Mageia
Mageia
added 2017/01/13 10:32 a.m.47 views

Updated php-ZendFramework2 packages fix security vulnerability

When using the zend-mail component to send email via the Zend\Mail\Transport\Sendmail transport, a malicious user may be able to inject arbitrary parameters to the system sendmail program. The attack is performed by providing additional quote characters within an address; when unsanitized, they c...

9.8CVSS4.2AI score0.38438EPSS
SaveExploits10References4
Mageia
Mageia
added 2017/01/06 8:28 a.m.47 views

Updated unrtf package fixes security vulnerability

A Stack-based buffer overflow has been found in unrtf 0.21.9, which affects functions including cmdexpand, cmdemboss and cmdengrave CVE-2016-10091...

7.5CVSS4AI score0.02836EPSS
SaveExploits0References3
Mageia
Mageia
added 2016/12/15 8:33 p.m.47 views

Updated chromium-browser-stable packages fix security vulnerabilities

Multiple flaws were found in the way Chromium 54 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. CVE-2016-5203, CVE-2016-5204, CVE-2016-5205, CVE-2016-5206,...

10CVSS2AI score0.11182EPSS
SaveExploits6References3
Mageia
Mageia
added 2016/12/08 7:33 a.m.47 views

Updated ntp packages fix security vulnerabilities

When ntpd is configured with rate limiting for all associations restrict default limited in ntp.conf, the limits are applied also to responses received from its configured sources. An attacker who knows the sources e.g., from an IPv4 refid in server response and knows the system is misconfigured ...

7.5CVSS1AI score0.12466EPSS
SaveExploits2References6
Mageia
Mageia
added 2016/11/21 10:18 p.m.47 views

Updated tre packages fix security vulnerability

The TRE library allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression CVE-2015-3796. A vulnerability has been found in the tre package that could allow an attacker to perform controlled he...

9.8CVSS9.2AI score0.12416EPSS
SaveExploits2References2
Mageia
Mageia
added 2016/11/17 11:40 p.m.47 views

Updated gnuchess packages fix security vulnerability

gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to user move input, where 160 characters of input can crash gnuchess CVE-2015-8972...

9.8CVSS9.4AI score0.03762EPSS
SaveExploits1References2
Mageia
Mageia
added 2016/10/12 1:46 p.m.47 views

The updated packages fix a security vulnerability

Integer overflow in the gdImageWebpCtx function in gdwebp.c in the GD Graphics Library aka libgd through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted imagewebp and...

9.8CVSS6.4AI score0.05101EPSS
SaveExploits0References2
Mageia
Mageia
added 2016/09/28 5:59 a.m.47 views

Updated gnutls packages fix security vulnerability

An issue was found in certificate validation using OCSP responses caused by not verifying the serial length, which can falsely report a certificate as valid CVE-2016-7444...

7.5CVSS2.4AI score0.02437EPSS
SaveExploits0References4
Mageia
Mageia
added 2016/09/25 3:45 p.m.47 views

Updated wireshark packages fix security vulnerabilities

The wireshark package has been updated to version 2.0.6, which fixes several security issues where a malformed packet trace could cause it to crash, and fixes several other bugs as well. See the release notes for details...

5.9CVSS3.6AI score0.02652EPSS
SaveExploits0References9
Mageia
Mageia
added 2016/07/12 7:49 p.m.47 views

Updated flash-player-plugin packages fix 52 security vulnerabilities

Adobe Flash Player 11.2.202.632 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a race condition vulnerability that could lead to information disclosure CVE-2016-424...

9.3CVSS1.6AI score0.36456EPSS
SaveExploits33References2
Mageia
Mageia
added 2016/04/25 7:57 a.m.47 views

Updated squid packages fix CVE-2016-4051

Updated squid packages fix security vulnerability: Due to incorrect buffer management Squid cachemgr.cgi tool is vulnerable to a buffer overflow when processing remotely supplied inputs relayed to it from Squid. This problem allows any client to seed the Squid manager reports with data that will...

8.8CVSS3.1AI score0.1828EPSS
SaveExploits0References2
Mageia
Mageia
added 2016/02/17 7:06 p.m.47 views

Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

6.5CVSS4.2AI score0.02563EPSS
SaveExploits0References4
Mageia
Mageia
added 2015/12/28 7:23 p.m.47 views

Updated bouncycastle packages fix security vulnerability

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman ECDH key exchanges, aka an "invalid curve attack" CVE-2015-7940...

5CVSS8.4AI score0.0482EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/12/24 11:08 a.m.47 views

Updated keepassx packages fix CVE-2015-8378

Updated keepassx package fixes security vulnerability: Cancelling an export operation creates clear text copy of all of the user's KeePassX password database entries. CVE-2015-8378...

7.5CVSS7.6AI score0.0119EPSS
SaveExploits0References1
Mageia
Mageia
added 2015/12/04 11:31 p.m.47 views

Updated python-django packages fix security vulnerability

If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format CVE-2015-8213...

5CVSS6.2AI score0.04284EPSS
SaveExploits0References3
Mageia
Mageia
added 2015/08/30 2:27 p.m.47 views

Updated glusterfs packages fix security vulnerability

There were cases where setuid could fail even when the caller is UID 0 The glusterd.service file was ommitted from the glusterfs package This update resolves both of these issues...

2.5AI score
SaveExploits0References2
Mageia
Mageia
added 2015/08/29 7:53 a.m.47 views

Updated firefox package fixes security vulnerability

Updated firefox packages fix security vulnerabilities: A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2015-4497. A flaw wa...

10CVSS9.5AI score0.08007EPSS
SaveExploits0References9
Mageia
Mageia
added 2015/08/10 2:31 p.m.47 views

Updated wordpress package fixes security vulnerability

The wordpress package has been updated to version 3.9.8, fixing three cross-site scripting issues CVE-2015-5732, CVE-2015-5733, CVE-2015-5734, a potential timing side-channel attack in Customizer CVe-2015-5730, an issue in Heartbeat where an attacker could lock a post from being edited...

7.5CVSS6.8AI score0.09665EPSS
SaveExploits0References4
Mageia
Mageia
added 2015/07/09 8:09 a.m.47 views

Updated bind package fixes security vulnerability

A recursive resolver that is performing DNSSEC validation can be deliberately terminated by any attacker who can cause a query to be performed against a maliciously constructed zone. This will result in a denial of service to clients who rely on that resolver CVE-2015-4620. Note that DNSSEC...

7.8CVSS8.2AI score0.37872EPSS
SaveExploits0References4
Mageia
Mageia
added 2015/07/01 1:23 p.m.47 views

Updated apache-mod_jk package fixes security vulnerability

An information disclosure flaw due to incorrect JkMount/JkUnmount directives processing was found in the Apache 2 module modjk to forward requests from the Apache web server to Tomcat. A JkUnmount rule for a subtree of a previous JkMount rule could be ignored. This could allow a remote attacker t...

5CVSS5.7AI score0.07059EPSS
SaveExploits0References2
Total number of security vulnerabilities5000