Project: Drupal coreVersion: 8.8.x-dev8.7.x-devDate: 2019-December-18Security risk: Moderately critical 10∕25 AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:DefaultVulnerability: Access bypassDescription: The Media Library module has a security vulnerability whereby it doesnt sufficiently restrict access to media items in certain configurations.Solution: If you are using Drupal 8.7.x, you should upgrade to Drupal 8.7.11.If you are using Drupal 8.8.x, you should upgrade to Drupal
More info:
https://www.drupal.org/sa-core-2019-011
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111224&om_rssid=sr-advisories
Type: Vulnerability. TYPO3 is prone to multiple remote code-execution vulnerabilities; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111227&om_rssid=sr-advisories
Type: Vulnerability. Google Chrome is prone to a use-after-free vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111225&om_rssid=sr-advisories
Type: Vulnerability. Google Chrome is prone to a use-after-free vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111225&om_rssid=sr-advisories
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111210&om_rssid=sr-advisories
Type: Vulnerability. Avaya IP Office Application Server is prone to a cross-site scripting vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111212&om_rssid=sr-advisories
Type: Vulnerability. IBM API Connect is prone to a local information-disclosure vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111207&om_rssid=sr-advisories
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111208&om_rssid=sr-advisories
Type: Vulnerability. Atlassian Application Links is prone to an information-disclosure vulnerability; fixes are available.
More info:
http://www.symantec.com/security_response/vulnerability.jsp?bid=111209&om_rssid=sr-advisories
