GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP (IPv4 and IPv6), TCP (IPv4 and IPv6), HTTP, or SMTP messages. GNUnet supports accounting to provide contributing nodes with better service. The primary service build on top of the framework is anonymous file sharing.
7afeb638bd8b5a33c6b8dab24b90c5d7467439adc79794ff33218e9180f8b01bUbuntu Security Notice 3973-1 - It was discovered that DHCP, when built with a mismatched external BIND library, incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause DHCP to crash, resulting in a denial of service.
b1a9908cc26d18b33993ca489c14dd87e40d4a1278556ee803b2c0e3c2d9e124This is the systemd-journald exploit produced by Qualys that demonstrates the vulnerabilities as highlighted in CVE-2018-16865 and CVE-2018-16866.
d1b7894dd26a8b8f09a1ab5daecbd7e72976370c01e517c417e68ce0cbf49297During a short security test, SEC Consult found a severe security vulnerability in the clearsign package of supplementary Go cryptography libraries.
34b99a5491b0fa02603b1fd5eae8e19ae3cc8932ba9a95a3884c82116240b0b3SOCA Access Control System version 180612 suffers from a cross site request forgery vulnerability.
70933d087842a6262e378991520c4607f050fd1d8b6c99c59bcb677da911a5d0SOCA Access Control System version 180612 suffers from remote SQL injection vulnerabilities that allow for authentication bypass.
32446f98f02bd2a206c897b31c410081df04c9f6dee5041641fd13f242c2340dSOCA Access Control System version 180612 suffers from a cross site scripting vulnerability.
788bbb4897839f35e01ffc5868c1ac1003a3e7a2e461ac520313499d059c1f29SOCA Access Control System version 180612 suffers from insecure direct object reference vulnerabilities that leak information like password hashes.
25b658e58ecb422b4477bfe11c6397482fb73c7a3d30a7202bb8b9327b3e8f1fSalesERP version 8.1 suffers from a remote SQL injection vulnerability.
9c1cda466c60400b2fccc19162ada8fe8aed23261327ac730e386fefbce7ab25XOOPS CMS version 2.5.9 suffers from a remote SQL injection vulnerability.
5b5f84f02bbc4b5584c151487e8631e4a1bd8fede5a40f7e009d809705e90ea9Firefly CMS version 1.0 suffers from a remote command execution vulnerability.
a9a65d0388e6422de5a7d34358d848998ed90475e92ac36d17d9dd37306de49eWordPress Form Maker plugin version 1.13.3 suffers from a remote SQL injection vulnerability.
426b45d32947941f83dd2c060d6278e5306070cc490f5c008dfa7eb4efe3bc5aRed Hat Security Advisory 2019-1152-01 - The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Issues addressed include a sandbox escape vulnerability.
0f160ca57978bc7fbb6f3879736341402943bf5feb6ef1b51ef77e2be99fc5eeUbuntu Security Notice 3972-1 - It was discovered that PostgreSQL incorrectly handled partition routing. A remote user could possibly use this issue to read arbitrary bytes of server memory. This issue only affected Ubuntu 19.04. Dean Rasheed discovered that PostgreSQL incorrectly handled selectivity estimators. A remote attacker could possibly use this issue to bypass row security policies.
958d050818c194ee55d1520ca4a5c677f3e6612680f5a2a24888fad040a4c0eaRed Hat Security Advisory 2019-1151-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include a code execution vulnerability.
7b6b814596aa4be0ca9078da206b4ded22ebbda65f93064fad40ba4e4b39299fRed Hat Security Advisory 2019-1148-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include a code execution vulnerability.
26fdddfec5579545f5ee9d461266473699286717bb06b61f6ffe10ad638c1155Red Hat Security Advisory 2019-1147-01 - Ruby on Rails is a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include denial of service and traversal vulnerabilities.
176ad29ccd859ac97edaa6ffb34b14feb1b0ff7c23cab9ba1d7903f20b06bc9fRed Hat Security Advisory 2019-1145-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly. Issues addressed include an ineffective connection limitation vulnerability.
7981dbb5b637c0d6404f4825b3fc714b68fe38d5cfc1840526b5bd5b6de36e4fRed Hat Security Advisory 2019-1143-01 - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Issues addressed include a bypass vulnerability.
0ac4258563db38006217aeddf30e4d8d552f7e3bd5179ecdb5952a281e5d87ecRed Hat Security Advisory 2019-1144-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.6.1. Issues addressed include a use-after-free vulnerability.
2e873f9b26d8e4c7304825179187434790568c35c75ee863e08b370cc309fa93Red Hat Security Advisory 2019-1150-01 - Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Issues addressed include a code execution vulnerability.
07d489d2c615f7e15ca8a1478b8074194c9f9181351454af685b18724ae679b4Red Hat Security Advisory 2019-1146-01 - The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Issues addressed include an out of bounds access vulnerability.
1fe725e8b6bdf2d3401d77a9c526639498ae77472dd3f9fda21c850d4e2cf714Red Hat Security Advisory 2019-1149-01 - Ruby on Rails is a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include denial of service and traversal vulnerabilities.
c1a51d9d3ab875233af1650dbdb71dcc1e0855a934989c6d5da9ccdfb15e9856Red Hat Security Advisory 2019-1142-01 - FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service server, designed to allow centralized authentication and authorization for a network. Issues addressed include a bypass vulnerability.
3df38db5c6db7737af00a15c6487b8e47f6f4eb560ff5cfedc7411b9340cb9bdDebian Linux Security Advisory 4442-1 - A vulnerability was discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the - -dSAFER sandbox being enabled).
99a97cb459e6cee554bbe1c498c6e25b188b1e4aacaea903dd842c71bcd69ba7
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed