Type: Vulnerability. Jenkins is prone to multiple security vulnerabilities; fixes are available.
October 18, 2019
Type: Vulnerability. Pulse Connect Secure and Policy Secure are prone to an access-bypass vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Pulse Connect Secure and Pulse Policy Secure are prone to multiple security vulnerabilities; fixes are available.
October 18, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapter is prone to multiple arbitrary code-execution vulnerabilities; fixes are available.
October 18, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a cross-site request-forgery vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. VMware SD-WAN by VeloCloud is prone to an information-disclosure vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to an arbitrary code-execution vulnerability; fixes are available.
October 18, 2019
Type: Vulnerability. Npmjs ‘csv-parse’ module is prone to a denial-of-service vulnerability; fixes are available.
October 18, 2019
Execs Could Face Jail Time For Privacy Violations
October 18, 2019
Major Airport Malware Attack Shines a Light on OT Security
October 18, 2019
Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise
October 18, 2019
Phishy text message tries to steal your cellphone account
October 18, 2019
The fix for CVE-2019-10871 broke xpdf. This change has been reverted until a better fix can be developed.
October 18, 2019
The 5.3.6 update contains a number of important fixes across the tree.
October 18, 2019
The 5.3.6 update contains a number of important fixes across the tree.
October 18, 2019
The 5.3.6 update contains a number of important fixes across the tree.
October 18, 2019
== Security fixes == * (T230402, CVE-2019-16738) SECURITY: Add permission check for suppressed account to Special:Redirect. == Links to all mentioned tasks == * https://phabricator.wikimedia.org/T230402 * https://phabricator.wikimedia.org/T227662
October 18, 2019
Zappos Offers Users 10% Discount in 2012 Breach Settlement
October 18, 2019
Reading Time: ~ 2 min. Cryptominers Found in Audio Files Researchers have recently found that both cryptominers and backdoors are being deployed within WAV audio files on targeted systems. Using steganography, attackers can include components for both loading and executing malicious scripts, while still allowing some audio files to play normally. Along with the malicious […]
October 18, 2019
Some Android adware apps hide icons to make it hard to remove them
October 18, 2019
Bitcoin money trail leads cops to ‘world’s largest’ child abuse site
October 18, 2019
Much-attacked Baltimore uses ‘mind-bogglingly’ bad data storage
October 18, 2019
kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846) * hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) * kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ [More…]
October 18, 2019
Two buffer allocation issues were identified in poppler. CVE-2019-9959
October 18, 2019
An update for jenkins is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 17, 2019
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2019
An update for mediawiki is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
October 17, 2019
Phorpiex Botnet Shifts Gears From Ransomware to Sextortion
October 17, 2019
Type: Vulnerability. Eclipse Jetty is prone to a cross-site scripting vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities; fixes are available.
October 17, 2019
Type: Vulnerability. Apache Axis is prone to a cross-site scripting vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to multiple arbitrary code-execution vulnerabilities; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to information-disclosure vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Download Manager is prone to an insecure file-permission vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Eclipse Jetty is prone to a security vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to an arbitrary code-execution vulnerability; fixes are available.
October 17, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to a cross-site scripting vulnerability; fixes are available.
October 17, 2019
Several cross-site scripting (XSS) vulnerabilities were discovered in WordPress, a popular content management framework. An attacker can use these flaws to send malicious scripts to an unsuspecting user.
October 17, 2019
In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can
October 17, 2019
Reading Time: ~ 3 min. In May of 2018, the General Data Protection Regulation (GDPR) came into effect in the EU. Seemingly overnight, websites everywhere started throwing pop-ups to inform us about their use of cookies and our privacy rights. While the presence of the pop-ups may be reassuring to some (and annoying to others), […]
October 17, 2019
Hacking Back? BriansClub Dark Web Attack a Boon for Banks
October 17, 2019
Trump Campaign Website Left Open to Email Server Hijack
October 17, 2019
Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws
October 17, 2019
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
October 17, 2019
Podcast: Departing Employees Could Mean Departing Data
October 17, 2019
Cybercrime Tool Prices Bump Up in Dark Web Markets
October 17, 2019
Galaxy S10 Fingerprint Sensor Thwarted With Screen Protector: Report
October 17, 2019
Unencrypted Mobile Traffic on Tor Network Leaks PII
October 17, 2019
On-Board ‘Mystery Boxes’ Threaten Global Shipping Vessels
October 17, 2019
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975) * OpenJDK: Out of bounds access in optimized String indexof implementation (Hotspot, 8224062) (CVE-2019-2977) * OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handl [More…]
October 17, 2019
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975) * OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConne [More…]
October 17, 2019
An update that fixes one vulnerability is now available.
October 17, 2019
An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 17, 2019
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 17, 2019
Pen testers find mystery black box connected to ship’s engines
October 17, 2019
Robotic hand solves Rubik’s Cube by learning how to learn about it
October 17, 2019
Hackers hack card details from BriansClub carding site
October 17, 2019
Adobe fixes 46 critical bugs in patchfest
October 17, 2019
What was wrong with Alexa? How Amazon Echo and Kindle got KRACKed
ESET Smart Home Research Team uncovers Echo, Kindle versions vulnerable to 2017 Wi-Fi vulnerabilities The post What was wrong with Alexa? How Amazon Echo and Kindle got KRACKed appeared first on WeLiveSecurity
October 17, 2019
Operation Ghost: The Dukes aren’t back – they never left
ESET researchers describe recent activity of the infamous espionage group, the Dukes, including three new malware families The post Operation Ghost: The Dukes aren’t back – they never left appeared first on WeLiveSecurity
October 17, 2019
Several security issues were fixed in LibTIFF.
October 17, 2019
The update of libsdl2 released as DLA 1714-1 led to several regressions, as reported by Avital Ostromich. These regressions are caused by libsdl1.2 patches for CVE-2019-7637, CVE-2019-7635, CVE-2019-7638 and CVE-2019-7636 being applied to libsdl2 without adaptations.
October 17, 2019
The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an incomplete fix for CVE-2019-7637. This issue was known upstream and resulted, among others, in windows versions from libsdl1.2 failing to set video mode.
October 17, 2019
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 17, 2019
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 17, 2019
Risk Level: Very Low.
October 17, 2019
Several security issues were fixed in the Linux kernel.
October 16, 2019
The updated packages fix a security vulnerability: Potential bypass of Runas user restrictions. (CVE-2019-14287) References:
October 16, 2019
10 Steps for Ransomware Protection
October 16, 2019
Type: Vulnerability. Oracle Solaris is prone to multiple local security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle E-Business Suite is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle E-Business Suite is prone to multiple security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle MySQL Server is prone to multiple security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Hospitality Reporting and Analytics is prone to multiple remote security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle E-Business Suite is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Hospitality RES 3700 is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle E-Business Suite is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Banking Digital Experience is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle E-Business Suite is prone to a remote vulnerability in Oracle Advanced Outbound Telephony; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle PeopleSoft Enterprise HCM Human Resources is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle PeopleSoft Enterprise SCM eProcurement is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Java SE is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Siebel UI Framework is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle FLEXCUBE Direct Banking is prone to multiple remote security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Primavera P6 Enterprise Project Portfolio Management is prone to a remote security vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Java SE and Java SE Embedded are prone to a remote vulnerability; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle PeopleSoft Enterprise PeopleTools is prone to multiple remote security vulnerabilities; fixes are available.
October 16, 2019
Type: Vulnerability. Oracle Primavera P6 Enterprise Project Portfolio Management is prone to a remote security vulnerability; fixes are available.
October 16, 2019