Lucene search
+L
MageiaMost viewed

6209 matches found

Mageia
Mageia
added 2024/09/11 8:42 p.m.38 views

Updated expat packages fix security vulnerabilities

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490 An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms where UINTMAX equals SIZEMAX...

9.8CVSS7.6AI score0.01686EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/09/11 8:42 p.m.38 views

Updated microcode package fix security vulnerabilities

Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-42667 Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to...

7.8CVSS7.4AI score0.00285EPSS
SaveExploits0References3
Mageia
Mageia
added 2024/06/17 5:44 p.m.38 views

Updated iperf packages fix security vulnerability

iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of message...

5.9CVSS6.7AI score0.01098EPSS
SaveExploits0References2
Mageia
Mageia
added 2024/05/09 2:40 a.m.38 views

Updated exfatprogs packages fix security vulnerability

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentryset. CVE-2023-45897...

5.5CVSS7.3AI score0.00381EPSS
SaveExploits1References2
Mageia
Mageia
added 2023/07/07 5:54 a.m.38 views

Updated testng packages fix security vulnerability

Path traversal in zip files CVE-2022-4065...

7.8CVSS7.1AI score0.00935EPSS
SaveExploits1References2
Mageia
Mageia
added 2023/05/31 6:41 a.m.38 views

Updated cups-filters packages fix security vulnerability

Possible command injection in the Backend Error Handler CVE-2023-24805...

8.8CVSS7.6AI score0.03697EPSS
SaveExploits1References5
Mageia
Mageia
added 2022/12/17 6:48 p.m.38 views

Updated python-slixmpp packages fix security vulnerability

Fixes missing certificate hostname validation...

7.5CVSS1.6AI score0.00473EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/10/23 10:48 p.m.38 views

Updated epiphany packages fix security vulnerability

In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow in ephystringshorten in the UI process via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered. CVE-2022-29536...

7.5CVSS2.8AI score0.02047EPSS
SaveExploits0References4
Mageia
Mageia
added 2022/10/18 11:14 p.m.38 views

Updated sos packages fix security vulnerability

SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. CVE-2022-2806...

5.5CVSS1.9AI score0.00249EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/05/15 10:06 a.m.38 views

Updated python-django-registration packages fix security vulnerability

Sensitive data could be included in error reports CVE-2021-21416...

3.7CVSS2.1AI score0.0041EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/04/23 5:22 p.m.38 views

Updated libinput packages fix security vulnerability

libinput could be made to crash or expose sensitive information. CVE-2022-1215...

7.8CVSS2.4AI score0.00371EPSS
SaveExploits0References3
Mageia
Mageia
added 2022/01/15 8:09 a.m.38 views

Updated htmldoc packages fix security vulnerability

Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp. CVE-2021-40985...

5.5CVSS4AI score0.00937EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/10/06 7:41 p.m.38 views

Updated weechat packages fix security vulnerability

A crafted WebSocket frame could result in a crash in the weechat Relay plugin...

7.5CVSS1.5AI score0.01594EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/07/16 8:25 a.m.38 views

Updated aom packages fix security vulnerabilities

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap CVE-2021-30473. aomdsp/graintable.c in libaom in AOMedia before 2021-03-30 has a use-after-free CVE-2021-30474. aomdsp/noisemodel.c in libaom in AOMedia before 2021-03-24 has a buffer overflow...

9.8CVSS3.5AI score0.02216EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/07/10 8:00 p.m.38 views

Updated libebml packages fix a security vulnerability

A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml CVE-2021-3405...

6.5CVSS2AI score0.01737EPSS
SaveExploits1References3
Mageia
Mageia
added 2021/07/04 2:13 a.m.38 views

Updated php packages fix security vulnerabilities

Updated PHP packages fix security vulnerabilities: - Fixed bug 81122: SSRF bypass in FILTERVALIDATEURL. CVE-2021-21705 PDOFirebird: - Fixed bug 76448: Stack buffer overflow in firebirdinfocb. CVE-2021-21704 - Fixed bug 76449: SIGSEGV in firebirdhandledoer. CVE-2021-21704 - Fixed bug 76450:...

5.9CVSS4.3AI score0.02091EPSS
SaveExploits2References2
Mageia
Mageia
added 2021/06/13 9:32 p.m.38 views

Updated djvulibre packages fix security vulnerabilities

Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file. CVE-2021-3500. Out of bounds write in function DJVU::filterbv via crafted djvu file. CVE-2021-32490. Integer overflow in function render in tools/ddjvu via crafted djvu file. CVE-2021-32491 Out of bounds read in...

7.8CVSS3AI score0.01038EPSS
SaveExploits0References4
Mageia
Mageia
added 2021/03/12 1:25 a.m.38 views

Updated gnuplot packages fix a security vulnerability

Double free when executing printsetoutput CVE-2020-25559. Additionally, a missing require for gnuplot has been added to gnuplot-qt package...

7.8CVSS2.6AI score0.0157EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/03/02 10:33 p.m.38 views

Updated wpa_supplicant packages fix security vulnerability

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range CVE-2021-27803...

7.5CVSS3.7AI score0.01228EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/02/19 10:27 a.m.38 views

Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...

7.8CVSS2.4AI score0.02276EPSS
SaveExploits0References4
Mageia
Mageia
added 2021/02/11 8:36 p.m.38 views

Updated phpldapadmin package fixes a security vulnerability

An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php CVE-2020-35132...

5.4CVSS4.6AI score0.01251EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/02/06 6:20 p.m.38 views

Updated python-py packages fix a security vulnerability

A denial of service via regular expression in the py.path.svnwc component of python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality CVE-2020-29651...

7.5CVSS6.7AI score0.04662EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/02/04 1:40 p.m.38 views

Updated messagelib packages fix a security vulnerability

In KDE KMail, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended...

4.3CVSS1AI score0.00586EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/01/17 4:07 p.m.38 views

Updated resteasy packages fix a security vulnerability

A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed CVE-2020-1695...

7.5CVSS1.3AI score0.01968EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/08/18 5:41 p.m.38 views

Updated firejail packages fix security vulnerability

It was reported that firejail does not respect the end-of-options separator "--", allowing an attacker with control over the command line options of the sandboxed application, to write data to a specified file CVE-2020-17367. It was reported that firejail when redirecting output via --output or...

9.8CVSS2.2AI score0.04098EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/06/10 10:26 p.m.38 views

Updated libzypp packages fix security vulnerability

Libzypp from mageia 7 is affected by a security issue. This update fixes this. Incorrect Default Permissions vulnerability in libzypp allowed local attackers to read a cookie store used by libzypp, exposing private cookies...

4CVSS5.6AI score0.00301EPSS
SaveExploits0References5
Mageia
Mageia
added 2020/05/24 6:04 p.m.38 views

Updated libntlm packages fix security vulnerability

Updated libntlm packages fix security vulnerability: It was discovered that libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in...

9.8CVSS2.3AI score0.03107EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/04/26 2:39 p.m.38 views

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 81.0.4044.122 fixes security issues: Multiple flaws were found in the way Chromium 81.0.4044.92 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...

9.6CVSS2.2AI score0.01326EPSS
SaveExploits1References3
Mageia
Mageia
added 2020/04/15 10:12 a.m.38 views

Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerability: In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin CVE-2019-15690...

8.8CVSS1.8AI score0.00746EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/02/13 10:49 a.m.38 views

Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: In Jp2Image::readMetadata in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

7.8CVSS4.2AI score0.04296EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/19 10:11 a.m.38 views

Updated wireshark packages fix security vulnerability

Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...

6.5CVSS1.6AI score0.01457EPSS
SaveExploits1References4
Mageia
Mageia
added 2020/01/05 3:37 p.m.38 views

Updated cyrus-imapd packages fix security vulnerability

Updated cyrus-imapd packages fix security vulnerability: It was discovered that the lmtpd component of the Cyrus IMAP server created mailboxes with administrator privileges if the "fileinto" was used, bypassing ACL checks CVE-2019-19783...

6.5CVSS1.7AI score0.01655EPSS
SaveExploits0References7
Mageia
Mageia
added 2019/12/13 6:25 p.m.38 views

Updated proftpd packages fix security vulnerability

An issue was discovered in tlsverifycrl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL skX509REVOKEDvalue function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the...

4.9CVSS2.7AI score0.01645EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/11/30 1:06 p.m.38 views

Updated gnupg2 packages fix security vulnerability

gnupg2 is updated to 2.2.18 and fix security vulnerability: Web of Trust forgeries using collisions in SHA-1 signatures CVE-2019-14855 Note that this change removes all SHA-1 based key signature newer than 2019-01-19 from the web-of-trust. This includes all key signature created with dsa1024 keys...

7.5CVSS7.7AI score0.01077EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/11/19 9:16 p.m.38 views

Updated libexif packages fix security vulnerability

The updated packages fix a security vulnerability: In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for...

8.8CVSS4.3AI score0.04059EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/09/12 7:09 p.m.38 views

Updated sympa packages fix security vulnerability

Updated sympa packages fix security vulnerability: Michael Kaczmarczik discovered a vulnerability in the web interface template editing function of Sympa, a mailing list manager. Owner and listmasters could use this flaw to create or modify arbitrary files in the server with privileges of sympa...

9.8CVSS2.9AI score0.02179EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/09/06 9:09 p.m.38 views

Updated mercurial packages fix security vulnerability

It was discovered that Mercurial mishandled symlinks in subrepositories. An attacker could use this vulnerability to write arbitrary files to the target’s filesystem CVE-2019-3902...

5.9CVSS2.2AI score0.01425EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/04/05 6:12 p.m.38 views

Updated advancecomp packages fix security vulnerability

advancecomp has been updated to fix a security issue that could be triggered when pressented with a malformed PNG file. advancecomp contained an integer overflow upon encountering an invalid PNG size, which could result in a buffer overflow CVE-2019-9210, as well as a heap-based buffer over-read...

7.8CVSS3.1AI score0.01424EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/04/05 6:12 p.m.38 views

Updated gnutls packages fix security vulnerability

A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption double free vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected. CVE-2019-3829...

7.5CVSS3.7AI score0.57706EPSS
SaveExploits1References4
Mageia
Mageia
added 2019/02/20 10:18 p.m.38 views

Updated libexif packages fix security vulnerability

It was found that specially crafted XIFIFDINTEROPERABILITY and EXIFIFDEXIF tags could be used for a denial of service CVE-2018-20030...

7.8CVSS2.7AI score0.03574EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/02/20 8:56 p.m.38 views

Updated irssi packages fix security vulnerability

It was discovered that Irssi incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code CVE-2019-5882...

9.8CVSS4.9AI score0.0233EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/02/14 8:38 a.m.38 views

Updated mad packages fix security vulnerability

The maddecoderrun function in decoder.c in libmad 0.15.1b allows remote attackers to cause a denial of service memory corruption via a crafted MP3 file CVE-2017-11552. The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1b allows attackers to cause a denial of service SIGABRT...

9.8CVSS6.1AI score0.07196EPSS
SaveExploits4References2
Mageia
Mageia
added 2019/01/08 9:50 p.m.38 views

Updated discount packages fix security vulnerabilities

The mkdtrimline function in mkdio.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted file CVE-2018-11468. DISCOUNT through version 2.2.3a is vulnerable to a Heap-based buffer-overflow in the markdown.c:isfootnote...

5.5CVSS6.2AI score0.03138EPSS
SaveExploits2References2
Mageia
Mageia
added 2018/12/03 10:13 p.m.38 views

Updated messagelib packages fix security vulnerability

Some HTML emails can trick messagelib into opening a new browser window when displaying said email as HTML. This happens even if the option to allow the HTML emails to access remote servers is disabled in KMail settings. This means that the owners of the servers referred in the email can see in...

5.3CVSS2.1AI score0.01104EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/10/19 6:00 p.m.38 views

Updated vlc packages fix security vulnerability

This update provides vlc 3.0.4 and fixes at least the following security issue: A use-after-free was discovered in the MP4 demuxer of the VLC media player, which could result in the execution of arbitrary code if a malformed media file is played CVE-2018-11529 For other fixes in this update, see...

8CVSS3.6AI score0.34154EPSS
SaveExploits10References3
Mageia
Mageia
added 2018/08/10 2:37 p.m.38 views

Updated glpi packages fix security vulnerability

The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php CVE-2018-13049...

8.8CVSS3.3AI score0.01064EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/06/19 11:42 p.m.38 views

Updated librsvg packages fix a security vulnerability

Updated librsvg package fixes security vulnerability: It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file CVE-2018-1000041...

8.8CVSS5.1AI score0.02091EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/04/22 7:59 p.m.38 views

Updated freeplane packages fix security vulnerability

Wojciech Regula discovered an XML External Entity vulnerability in the XML Parser of the mindmap loader in freeplane, a Java program for working with mind maps, resulting in potential information disclosure if a malicious mind map file is opened CVE-2018-1000069...

5.5CVSS3.3AI score0.03415EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/04/13 8:08 p.m.38 views

Updated puppet packages fix security vulnerability

It was discovered that Puppet incorrectly handled permissions when unpacking certain tarballs. A local user could possibly use this issue to execute arbitrary code CVE-2017-10689...

5.5CVSS2AI score0.00404EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/04/06 10:54 p.m.38 views

Updated 389-ds-base packages fix security vulnerability

It was discovered that a lack of size check in slapictmemcmp function may lead to authentication bypass through pre-hashed userPassword attributes under highly specific circumstances CVE-2017-15135...

8.1CVSS1.9AI score0.03574EPSS
SaveExploits0References3
Total number of security vulnerabilities5000