Month: marzo 2018

More info: https://wpvulndb.com/vulnerabilities/9044

More info: https://wpvulndb.com/vulnerabilities/9046

Marios Nicolaides discovered that the PHP plugin in uWSGI, a fast,self-healing application container server, does not properly handle aDOCUMENT_ROOT check during use of the --php-docroot option, allowing aremote attacker to mount a directory traversal attack and gainunauthorized read access to sensitive files located outside of the webroot directory. More info: https://www.debian.org/security/2018/dsa-4142

Several vulnerabilities have been discovered in OpenJDK, animplementation of the Oracle Java platform, resulting in denial ofservice, sandbox bypass, execution of arbitrary code, incorrectLDAP/GSS authentication, insecure use of cryptography or bypass ofdeserialisation restrictions. More info: https://www.debian.org/security/2018/dsa-4144

Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-boundsmemory write when playing Vorbis media files could result in theexecution of arbitrary code. More info: https://www.debian.org/security/2018/dsa-4143

Several security issues have been found in the Mozilla Firefox webbrowser: Multiple memory safety errors and other implementation errorsmay lead to the execution of arbitrary code, denial of service orinformation disclosure. More info: https://www.debian.org/security/2018/dsa-4139

Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in thecodebook parsing code of the Libtremor multimedia library could resultin the execution of arbitrary code if a malformed Vorbis file is opened. More info: https://www.debian.org/security/2018/dsa-4141

Richard Zhu discovered that an out-of-bounds memory write in thecodebook parsing code of the Libvorbis multimedia library could resultin the execution of arbitrary code if a malformed Vorbis file is opened. More info: https://www.debian.org/security/2018/dsa-4140

More info: https://wpvulndb.com/vulnerabilities/9041

Linux kernel vulnerabilities CVE-2015-4170, CVE-2015-6526, and CVE-2015-7837. Security Advisory. Security Advisory Description. ... More info: https://support.f5.com/csp/article/K12903841