Author: Cyberthreat Blog

The pulp-qpid-ssl-cfg script in Pulp before 2.8.6 allows local users to obtain the CA key.

libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).

Pulp before 2.8.5 uses bash’s $RANDOM in an unsafe way to generate passwords.

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin’s sign/encrypt action occurs during use of the Send Later feature, which allows remote...

A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username...