Asterisk Project Security Advisory - If Asterisk receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a crash will occur.
01b4f0b91afa8ead00f323fea3922b3d1fb27aa6ab6e1d11f3fb55cdeac8d9c1Asterisk Project Security Advisory - A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
fda4a6a55d938370b2cff51231d5b5cedb7a698db9552d692348f87f6dd26560Asterisk Project Security Advisory - A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls can be hijacked as a result.
f6ef15929258c9bf9a7eb09fc36ce5def67a2b9d5cf46bd3dd3f473a58858b6fMicrosoft Internet Explorer suffers from a use-after-free vulnerability in Script arguments during toJSON callback.
8028683bdacfe9537d7aa6ebec7ccf45a6d6f6e1549c16b0e3cc53a6d8853f2bmacOS suffers from an update_dyld_shared_cache privilege escalation vulnerability.
07e51301d8683d6e39251cf95eaee6c25ac3c5aa9945b3f9d48ce358af325a02Ubuntu Security Notice 4198-1 - It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary code.
1d813491382893aa76a3052f8c6d0b9518234fe1978db9ee25ad660fc8e9ea7cUbuntu Security Notice 4197-1 - It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.
a45a34a52cb88dfe6f7cca466bbfa3d532ee0e6d4c77eec287474dcd8e6290d4Red Hat Security Advisory 2019-3942-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the openshift container images for Red Hat OpenShift Container Platform 4.1.24. A weak permission vulnerability was addressed.
4fcdd820c517aee052b8b6e6735fbba7511a20317259ded94122f3006fbdffa8Network Management Card version 6.2.0 suffers from a host header injection vulnerability.
61fa30522835e78f4afab1523a77d92d612e7d2ba89e86d01f69f8b2a99cd7e6Slackware Security Advisory - New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
5d1bb919330bda0c60b52a37060b01aa963fd00e33676e4a5aafb04849603418Pagekit CMS version 1.0.17 suffers from a cross site request forgery vulnerability.
7987a0501163511d8fe21b7e3dc5bfd9115ca88d9f4d5383cc8eda45e186eb53GNU Mailutils versions 2.0 through 3.7 suffer from a local privilege escalation vulnerability.
a4693f84e17fab3447aec45a36c8d43ab24093bae654c432da9740e7d9cd34aaRed Hat Security Advisory 2019-3941-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This is a text-only advisory for the machine-os-content container image, which includes RPM packages for Red Hat Enterprise Linux CoreOS. Issues addressed include bypass and denial of service vulnerabilities.
4e761927f0cc5297cdd4c2315408630ee69d81fb83516060648b9a14bfb71524Red Hat Security Advisory 2019-3940-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the runC container image for Red Hat OpenShift Container Platform 4.1.24. The runC tool is a lightweight, portable implementation of the Open Container Format that provides a container runtime. Issues addressed include a bypass vulnerability.
045b84ea8814928ca54c94cf63e44cd51a238001881845f9dd7453b6c10dbdb4TestLink version 1.9.19 suffers from a persistent cross site scripting vulnerability.
86e26947c940c9d530ddb67e77336e366e006fb43b1697fad0ed86a2cbec93a6Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.
0dbda8d0d990d068732966f13049d112a26dce62145d234383467c1d877dedd6
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed