Advisory Catalog

Adobe Reader and Acrobat Use-After-Free Vulnerability

Webbynode Code Injection vulnerability

sprout Arbitrary Code Execution vulnerability

Drupal has open redirect vulnerability in the Overlay module

Microsoft Windows Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Tryton Directory Traversal vulnerability

Microsoft Windows Out-of-Bounds Write Vulnerability

Microsoft Graphics Component Memory Corruption Vulnerability

Salt has insufficient argument validation in several modules

SaltStack MITM SSH attack in salt-ssh

SaltStack insecurely uses /tmp

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

Minion identity not validated in saltstack

SaltStack Privilege Escalation vulnerability

PyCrypto does not properly reseed PRNG before allowing access

rgpg Code Injection vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name

Django Denial of Service Vulnerability in the authentication framework

Microsoft Internet Explorer Resource Management Errors Vulnerability

Django Directory Traversal via ssi template tag

Sounder Contains Arbitrary Command Execution Vulnerability

python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate

Apache Qpid Python client Improper certificate validation

PHP OpenID Library Denial of Service vulnerability

OpenStack Swift Unchecked user input in XML responses

CoolURI extension for TYPO3 vulnerable to SQL Injection

Puppet Improper Input Validation vulnerability

Improper Input Validation in pip

pyshop vulnerable to man-in-the-middle attacks due to using HTTP to retrieve packages from the PyPI repository

Setuptools vulnerable to Man-in-the-middle attacks

Microsoft Internet Explorer Memory Corruption Vulnerability

News system (news) extension for TYPO3 vulnerable to SQL Injection

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Multishop extension for TYPO3 has SQL Injection vulnerability

Microsoft Office Buffer Overflow Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Linux Kernel Privilege Escalation Vulnerability

Microsoft Internet Explorer Remote Code Execution Vulnerability

phpMyAdmin Remote Code Execution

Karteek Docsplit vulnerable to OS Command Injection

Improper Input Validation in multi_xml

Linux Kernel Integer Overflow Vulnerability

Thumbshooter vulnerable to Code Injection

extlib does not properly restrict casts of string values

HTTParty does not restrict casts of string values

crack does not properly restrict casts of string values

nori contains Improper Input Validation

OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM