907866 matches found
DLA-1857-1 nss - security update
Bulletin has no description...
DLA-1789-2 intel-microcode - security update
Bulletin has no description...
CVE-2019-9670
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection XXE vulnerability, as demonstrated by Autodiscover/Autodiscover.xml...
DSA-4431-1 libssh2 - security update
Bulletin has no description...
DLA-1743-1 thunderbird - security update
Bulletin has no description...
DLA-1694-1 qemu - security update
Bulletin has no description...
DLA-1613-1 sqlite3 - security update
Bulletin has no description...
CVE-2018-19396
ext/standard/varunserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service application crash via an unserialize call for the com, dotnet, or variant class...
DLA-1577-1 xen - security update
Bulletin has no description...
DLA-1562-1 poppler - security update
Bulletin has no description...
GHSA-4FQ3-MR56-CG6R Spring Data Commons remote code injection vulnerability
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted request parameters...
DSA-4321-1 graphicsmagick - security update
Bulletin has no description...
DLA-1443-1 evolution-data-server - security update
Bulletin has no description...
CVE-2017-16006
Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of data: URIs in links and can therefore execute javascript...
DSA-4158-1 openssl1.0 - security update
Bulletin has no description...
DLA-1301-1 tomcat7 - security update
Bulletin has no description...
GHSA-X457-CW4H-HQ5F JSON gem has Improper Input Validation vulnerability
The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...
CVE-2017-9805
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads...
DLA-1097-1 tcpdump - security update
Bulletin has no description...
DSA-3966-1 ruby2.3 - security update
Bulletin has no description...
DLA-1034-1 php5 - security update
Bulletin has no description...
DLA-1028-1 apache2 - security update
Bulletin has no description...
DLA-1007-1 icedove - security update
Bulletin has no description...
DLA-993-1 linux - security update
Bulletin has no description...
DLA-958-1 libonig - security update
Bulletin has no description...
DSA-3842-1 tomcat7 - security update
Bulletin has no description...
DLA-906-1 firefox-esr - security update
Bulletin has no description...
DLA-567-1 mysql-5.5 - security update
Bulletin has no description...
CVE-2016-5300
The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service CPU consumption via crafted identifiers in an XML document. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876...
DLA-484-1 graphicsmagick - security update
Bulletin has no description...
CVE-2016-2105
Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data...
DSA-3548-2 samba - regression update
Bulletin has no description...
DLA-435-1 tomcat6 - security update
Bulletin has no description...
DSA-3469-1 qemu - security update
Bulletin has no description...
DLA-358-1 openssl - security update
Bulletin has no description...
DLA-355-1 libxml2 - security update
Bulletin has no description...
DSA-3351-1 chromium-browser - security update
Bulletin has no description...
DLA-284-1 apache2 - security update
Bulletin has no description...
DLA-266-1 libxml2 - security update
Bulletin has no description...
DLA-263-1 ruby1.9.1 - security update
Bulletin has no description...
DLA-246-2 linux-2.6 - security update
Bulletin has no description...
DLA-189-1 libgd2 - security update
Bulletin has no description...
DLA-156-1 samba - security update
Bulletin has no description...
DLA-114-1 heirloom-mailx - security update
Bulletin has no description...
DLA-81-1 openssl - security update
Bulletin has no description...
DLA-25-2 python2.6 - regression update
Bulletin has no description...
DLA-25-1 python2.6 - security update
Bulletin has no description...
DSA-2994-1 nss - security update
Bulletin has no description...
DSA-2896-1 openssl - security update
Bulletin has no description...
DSA-2579-1 apache2 - several
Bulletin has no description...