Author: Cyberthreat Blog

Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.

The pulp-qpid-ssl-cfg script in Pulp before 2.8.6 allows local users to obtain the CA key.

libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).

Pulp before 2.8.5 uses bash’s $RANDOM in an unsafe way to generate passwords.

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin’s sign/encrypt action occurs during use of the Send Later feature, which allows remote...