Filter
AND
AND
groff (GNU troff)contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program wit…
6.5
First published (updated )
Python Babel LocaledataPython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which ca…
4.3
First published (updated )
Todd Miller Sudosudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the …
4.4
First published (updated )
Todd Miller Sudosudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not prop…
4.4
First published (updated )
Todd Miller Sudosudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not …
4.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Todd Miller Sudosudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximat…
6.9
First published (updated )
Python Babel LocaledataThe HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython…
5.8
First published (updated )
libcurlThe darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
libxml2parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substit…
First published (updated )
CurlcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which a…
First published (updated )
CurlcURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cooki…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
PostgreSQL JDBC DriverThe "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invok…
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apple iOS and macOSThe fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a denial …
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.