Project: Drupal coreVersion: 8.8.x-dev8.7.x-dev7.x-devDate: 2019-December-18Security risk: Critical 17∕25 AC:Basic/A:User/CI:All/II:All/E:Proof/TD:UncommonVulnerability: Multiple vulnerabilitiesDescription: The Drupal project uses the third-party library Archive_Tar, which has released a security improvement that is needed to protect some Drupal configurations.Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes
More info:
https://www.drupal.org/sa-core-2019-012
Type: Vulnerability. IBM WebSphere Application Server is prone to an information disclosure vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111293&om_rssid=sr-advisories
Type: Vulnerability. lodash is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111295&om_rssid=sr-advisories
More info:
https://wpvulndb.com/vulnerabilities/9982
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111294&om_rssid=sr-advisories
Type: Vulnerability. Linux Kernel is prone to a directory-traversal vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111292&om_rssid=sr-advisories
Type: Vulnerability. Das U-Boot is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111290&om_rssid=sr-advisories
Type: Vulnerability. GraphicsMagick is prone to a heap-based buffer-overflow vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111289&om_rssid=sr-advisories
Type: Vulnerability. BMC Remedy Smart Reporting is prone to an XML External Entity injection vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111291&om_rssid=sr-advisories
Type: Vulnerability. Kubernetes API Server is prone to an open-redirection vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111288&om_rssid=sr-advisories
