Type: Vulnerability. Philips Veradius Unity, Pulsera, and Endura are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Cloud Foundry Cloud Controller API is prone to a security-bypass vulnerability; fixes are available.
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient’s way of scp’ing session setup files from client to server, resulting in an error message shown in a GUI error dialog box during session startup (and session resuming).
An update that fixes two vulnerabilities is now available.
What are some of the key things you should do with your shiny new device as soon as you unbox it? The post How to secure your digital Christmas presents appeared first on WeLiveSecurity
An update for fribidi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update for libyang is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An issue has been found in cups, the Common UNIX Printing System(tm). An incorrect bounds check could lead to a possible out-of-bounds read and
An update that fixes 7 vulnerabilities is now available.
security update
Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix.
An update that solves 26 vulnerabilities and has 14 fixes is now available.
security update
New tigervnc packages are available for Slackware 14.2 and -current to fix security issues.
New openssl packages are available for Slackware 14.2 and -current to fix a security issue.
– Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
– Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
Type: Vulnerability. Palo Alto Networks PAN-OS is prone to a privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Telos AMHS is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Multiple Apple Products are prone to an arbitrary code execution vulnerability; fixes are available.
Type: Vulnerability. Atlassian Confluence Server and Data Center are prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. Django is prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. D-Link DIR-615 is prone to a privilege-escalation vulnerability.
Type: Vulnerability. ABB PB610 Panel Builder 600 is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. TYPO3 is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Multiple Dell products are prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Drupal Core is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Apache Xerces-C is prone to a remote code-execution vulnerability.
Type: Vulnerability. Sysstat is prone to a memory-corruption vulnerability; fixes are available.
Type: Vulnerability. Apache Tomcat is prone to a session-fixation vulnerability; fixes are available.
Type: Vulnerability. Drupal is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Apache Tomcat is prone to local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Drupal is prone to an access-bypass vulnerability; fixes are available.
Reading Time: ~ 2 min. Honda Customer Database Exposed Officials have been working over the past work to secure a database containing highly sensitive information belonging to more than 26,000 North American customers of the Honda motor company. The database in question was originally created in October and was only discovered on December 11. While […]
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash was ultimately caused by an off-by-one error
An ongoing phishing scam uncovered by ESET researchers seeks to wreak havoc on your money and digital life in one fell swoop The post Ambitious scam wants far more than just PayPal logins appeared first on WeLiveSecurity
An update that fixes 7 vulnerabilities is now available.
While preparing a fix for CVE-2017-6314 an unknown symbol g_uint_checked_mul() was introduced.
An update that solves 24 vulnerabilities and has 58 fixes is now available.
An update that solves 24 vulnerabilities and has 58 fixes is now available.
security update
Malware and legal requirements force academics and students to join a near-endless line in order to pick up their passwords The post 38,000 people forced to pick up email passwords in person appeared first on WeLiveSecurity
An update for fribidi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Updated htmldoc packages fix security vulnerability: In HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by a floating point math difference between GCC and Clang (CVE-2019-19630).
Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be possible to pass a location which contains commands to be executed in addition (CVE-2019-14889).
Updated freerdp packages fix security vulnerabilities: Multiple memory leaks in libfreerdp/codec/region.c (CVE-2019-17177). Memory leak in HuffmanTree_makeFromFrequencies (CVE-2019-17178).
Reading Time: ~ 3 min. As the year draws to a close, the cybersecurity analysts at Webroot and Carbonite pull out their crystal balls to make their predictions for the year ahead. Our experts predict many of the trends they’ve been tracking throughout the year—well-researched attacks, RDP compromise, and the importance of user education—will continue […]
security update
Type: Vulnerability. TYPO3 is prone to multiple remote code-execution vulnerabilities; fixes are available.
Type: Vulnerability. TYPO3 is prone to an SQL-injection vulnerability; fixes are available.
Type: Vulnerability. Microsoft SharePoint Server is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Google Chrome is prone to a use-after-free vulnerability; fixes are available.
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
