Filter
AND
groff (GNU troff)contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program wit…
6.5
First published (updated )
groff (GNU troff)contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbi…
3.3
First published (updated )
Python Babel LocaledataPython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which ca…
4.3
First published (updated )
Todd Miller Sudosudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the …
4.4
First published (updated )
Todd Miller Sudosudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not prop…
4.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Todd Miller Sudosudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not …
4.4
First published (updated )
Todd Miller Sudosudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximat…
6.9
First published (updated )
Python Babel LocaledataThe HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython…
5.8
First published (updated )
libcurlThe darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, …
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apple iOS and macOSThe resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implemen…
7.5
First published (updated )
libxml2parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substit…
First published (updated )
CurlcURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which a…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CurlcURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cooki…
First published (updated )
PostgreSQL JDBC DriverThe "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invok…
4.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.