Ubuntu Security Notice 4588-1 - It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote attacker could exploit this with a crafted file to execute arbitrary code.
c849dce35bc30e77824edd6793dcda3546a7b9b04695fd4ce5ec5f5e155e8a5cUbuntu Security Notice 4586-1 - It was discovered that PHP ImageMagick extension didn't check the address used by an array. An attacker could use this issue to cause PHP ImageMagick to crash, resulting in a denial of service.
c4d79844145543c3922e2a6f5e1895cf559ec6472507132c0c38ea683219d774Ubuntu Security Notice 4587-1 - Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. Josef Gajdusek discovered that iTALC had heap-based buffer overflow vulnerabilities. A remote attacker could used these issues to cause a denial of service or possibly execute arbitrary code. Various other issues were also addressed.
852e2ad5f87cab236b79c9a3c921691e530d13ce804213bb2268c40edc71dc2cnfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.
892447905e68f785ecdd26555a153712c8e50b29f65da72a7bfb4bc780a8f600RedTeam Pentesting discovered a vulnerability in the BigBlueButton web conferencing system version 2.2.25 that allows participants of a conference with permissions to upload presentations to read arbitrary files from the file system and perform server-side requests. This leads to administrative access to the BigBlueButton instance.
41eaaa438c053a1afcdc56d2cd1717b2db4bf402566f20e2d848123cbaf0cbf1Ubuntu Security Notice 4596-1 - It was discovered that Tomcat did not properly manage HTTP/2 streams. An attacker could possibly use this to cause Tomcat to consume resources, resulting in a denial of service. It was discovered that Tomcat did not properly release the HTTP/1.1 processor after the upgrade to HTTP/2. An attacker could possibly use this to generate an OutOfMemoryException, resulting in a denial of service. Various other issues were also addressed.
586eca4f5ac4ca20d495e510bd4240f87e2caec95b0525e93efdd8b31a455a34Red Hat Security Advisory 2020-4295-01 - PostgreSQL is an advanced object-relational database management system. Issues addressed include bypass and improper authorization vulnerabilities.
941f7c5e5b5f41c94aa5d9cb3177c72753229956c9ef97758409a2ce95e87220Bludit versions 3.9.2 and below bruteforce mitigation bypass exploit. Please visit the related homepage for deep dive details on usage.
699d0927648d79172070e30dfd20c5f391423d6b8791f6bb95db49e6c2114867Tiki Wiki CMS Groupware version 21.1 suffers from an authentication bypass vulnerability.
fdb2d2af820d67ef635b8e0f61fc2a454ea62824eead6548a4ec9d5306effdbcLibtaxii versions 1.1.117 and below and OpenTaxi versions 0.2.0 and below suffer from a server-side request forgery vulnerability.
8674687fefdfd4e76168ac6e6b51d5b714ae9665cf070c865c3957dbd13ddf63Red Hat Security Advisory 2020-4264-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
7805f03df9c390692d08feead451abb3bf3b927c8c3392ce18ac74af42634150Ubuntu Security Notice 4595-1 - It was discovered that Grunt did not properly load yaml files. An attacker could possibly use this to execute arbitrary code.
869eb629f4f11b6553cabb4ed59cae9e222d47c0f4577e1be2fd8499d58f4b47GOautodial version 4.0 suffers from a remote shell upload vulnerability.
0085f0c395aedb6eeb4cdbcd8c5646045e41ace8ab6b82ba53f5ef1df3119143Ubuntu Security Notice 4594-1 - It was discovered that Quassel incorrectly handled Qdatastream protocol. A remote attacker could possibly use this issue to execute arbitrary code. It was discovered that Quassel incorrectly handled certain login requests. A remote attacker could possibly use this issue to cause a denial of service.
455fd8d476412d476d20a8af81d6f7521e1ec0f7a8917720040db77c55e04834School Faculty Scheduling System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
7f7430970e932d434b301925cd6542b96ae4108450f192f06b87e005ffef1397School Faculty Scheduling System version 1.0 suffers from a persistent cross site scripting vulnerability.
5b0e209318f5530eaa84ee220a3be30ef6be875921a5e5021415a5b002e43403Red Hat Security Advisory 2020-4299-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include crlf injection, denial of service, and double free vulnerabilities.
68d399ed7e240bb3ab98c139304e5b93c1566ee5d259b9c3fa61f7327e6d6b4bHrsale version 2.0.0 suffers from a local file inclusion vulnerability.
f2bc6f68dc2b4bd21fb631c93a8683313c5d45427901f02a6f6ede52fb900613
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Subscribe to an RSS Feed