Type: Vulnerability. Cisco SPA122 ATA with Router Devices are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to an information disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Multiple Sonatype Products are prone to an unspecified remote code execution vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to multiple HTML-injection vulnerabilities; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple cross-site scripting vulnerabilities; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to a remote denial-of-service vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. CA Performance Management is prone to a security-bypass vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Broken Link Checker plugin for WordPress is prone to a cross-site scripting vulnerability.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Small Business Smart and Managed Switches are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. TYPO3 freeCap CAPTCHA extension is prone to a remote code-execution vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Aironet Access Points are prone to a denial-of-service vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Linux Kernel is prone to a buffer-overflow vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco TelePresence CE Software is prone to a local command-injection vulnerability; fixes are available.
October 22, 2019
No ‘Silver Bullet’ Fix for Alexa, Google Smart Speaker Hacks
October 22, 2019
Magecart 5 Linked to Carbanak Gang
October 22, 2019
An update that fixes three vulnerabilities is now available.
October 22, 2019
An update that fixes one vulnerability is now available.
October 22, 2019
US nuclear weapons command finally ditches 8-inch floppies
October 22, 2019
Storing your stuff securely in the cloud
October 22, 2019
NordVPN reveals breach at datacenter provider
The company says that the incident, going back to March 2018, affected only 1 out of its 3,000 servers The post NordVPN reveals breach at datacenter provider appeared first on WeLiveSecurity
October 22, 2019
An update that solves 40 vulnerabilities and has 225 fixes is now available.
October 22, 2019
Vatican launches smart rosary – complete with brute-force flaw
October 22, 2019
Survey Finds People are Privacy Hypocrites
October 22, 2019
Woman ordered to type in iPhone passcode so police can search device
October 22, 2019
An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 and Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 22, 2019
An update that solves one vulnerability and has 21 fixes is now available.
October 22, 2019
An update that fixes one vulnerability is now available.
October 22, 2019
Google chief warns visitors about smart speakers in his home
October 22, 2019
OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989) * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945) * OpenJDK: NULL pointer dereferen [More…]
October 22, 2019
An update is now available for Red Hat Satellite 6.6 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 22, 2019
OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989) * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945) * OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019- [More…]
October 22, 2019
An update for python is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
October 22, 2019
An update for wget is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
October 22, 2019
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 22, 2019
Action Fraud? Inaction Fraud
October 21, 2019
Gustuff Android Banker Switches Up Technical Approach
October 21, 2019
security update
October 21, 2019
U.S. Government, Military Personnel Data Leaked By Autoclerk
October 21, 2019
Type: Vulnerability. Cisco Expressway Series and Telepresence VCS are prone to a cross-site scripting vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to multiple local arbitrary file-overwrite vulnerabilities; fixes are available.
October 21, 2019
Type: Vulnerability. Apache Thrift is prone to a denial-of-service vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to a local arbitrary file-write vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to a local privilege-escalation vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco Wireless LAN Controller Software is prone to a local directory-traversal vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. AVEVA IEC870IP Driver for Vijeo Citect and Citect SCADA is prone to a stack-based buffer-overflow vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Apache Thrift is prone to a remote security vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to a local privilege-escalation vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Palo Alto Networks GlobalProtect Agent is prone to a local privilege-escalation vulnerability; fixes are available.
October 21, 2019
Turla Compromises, Infiltrates Iranian APT Infrastructure
October 21, 2019
Assange fails to delay extradition hearing as date set for February
October 21, 2019
Avast Network Breached As Hackers Target CCleaner Again
October 21, 2019
Train to be a certified cyber security professional for just $39
October 21, 2019
Don’t look now, but Pixel 4’s Face Unlock works with eyes closed
October 21, 2019
Samsung Galaxy S10 fingerprint reader beaten by $3 gel protector
October 21, 2019
Mind your own business! CEOs who misuse data could end up in jail
October 21, 2019
Winnti Group’s skip‑2.0: A Microsoft SQL Server backdoor
Notorious cyberespionage group debases MSSQL The post Winnti Group’s skip‑2.0: A Microsoft SQL Server backdoor appeared first on WeLiveSecurity
October 21, 2019
It was discovered that Aspell, the GNU spell checker, incorrectly handled certain inputs which leads to a stack-based buffer over-read. An attacker could potentially access sensitive information.
October 20, 2019
An update that solves one vulnerability and has two fixes is now available.
October 20, 2019
An update that solves one vulnerability and has two fixes is now available.
October 20, 2019
security update
October 19, 2019
An update that fixes four vulnerabilities is now available.
October 19, 2019
An update that fixes one vulnerability is now available.
October 19, 2019
An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 19, 2019
It was discovered that the Special:Redirect functionality of MediaWiki, a website engine for collaborative work, could expose suppressed user names, resulting in an information leak.
October 19, 2019
New build after fixing BuildRequires —- – Rebase to upstream version 3.9.0 – fix CVE-2019-14745
October 19, 2019
In the nfs-utils package, providing support files for Network File System (NFS) including the rpc.statd daemon, the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files
October 19, 2019
* Rebase to 1.8.28 * Fixed CVE-2019-14287
October 18, 2019
Microsoft Tackles Election Security with Bug Bounties
October 18, 2019
Type: Vulnerability. Horner Automation Cscape is prone to multiple arbitrary code-execution vulnerabilities; fixes are available.
October 18, 2019
Type: Vulnerability. Cisco Aironet Access Points is prone to a denial-of-service vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. ISC Kea is prone to a remote denial-of-service vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Palo Alto Networks GlobalProtect Agent is prone to a local privilege-escalation vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. ISC Kea is prone to a remote denial-of-service vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. ISC Kea is prone to a remote denial-of-service vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Cisco Aironet Access Points is prone to an unauthorized access vulnerability; fixes are available.
October 18, 2019