August 6, 2020
ppp could be made to load arbitrary kernel modules and possibly run programs.
August 6, 2020
An update that solves one vulnerability and has one errata is now available.
August 6, 2020
Twitter Fixes High-Severity Flaw Affecting Android Users
August 5, 2020
FBI warns of surge in online shopping scams
In one scheme, shoppers ordering gadgets or gym equipment are in for a rude surprise – they receive disposable face masks instead The post FBI warns of surge in online shopping scams appeared first on WeLiveSecurity
August 5, 2020
Microsoft Teams Patch Bypass Allows RCE
August 5, 2020
A Cyber ‘Vigilante’ is Sabotaging Emotet’s Return
August 5, 2020
An update that fixes 10 vulnerabilities is now available.
August 5, 2020
An update that fixes 26 vulnerabilities is now available.
August 5, 2020
An update that fixes one vulnerability is now available.
August 5, 2020
Red Hat Ansible Tower 3.7.2-1 – RHEL7 Container 2. Description: * Updated Named URLs to allow for testing the presence or absence of objects (CVE-2020-14337)
August 5, 2020
Red Hat Ansible Tower 3.6.5-1 – RHEL7 Container 2. Description: * Removed reports option for Satellite inventory script * Fixed Tower Server Side Request Forgery on Credentials (CVE-2020-14327)
August 5, 2020
OPA: A general-purpose policy engine for cloud-native
August 5, 2020
USN-4441-1 introduced a regression in MySQL
August 5, 2020
NetWalker Ransomware Rakes in $29M Since March
August 4, 2020
security update
August 4, 2020
Newsletter WordPress Plugin Opens Door to Site Takeover
August 4, 2020
Twitter Could Face $250M FTC Fine Over Improper Data Use
August 4, 2020
An update that fixes one vulnerability is now available.
August 4, 2020
An update that fixes one vulnerability is now available.
August 4, 2020
libssh could be made to crash if it received a specially crafted request.
August 4, 2020
GandCrab ransomware hacker arrested in Belgium
August 4, 2020
Reading Time: ~ 5 min. Don’t expect cybercriminals to go easy during a hurricane. Quite the opposite, in fact. Just like they’ve used the coronavirus pandemic to launch COVID-related malware scams, hackers will capitalize on the names and news coverage of hurricanes to disguise attacks. That’s why now is a good time to review your […]
August 4, 2020
postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL6 noarch postgresql-jdbc-8.4.704-4.el6_10.noarch.rpm – Scientific Linux Development Team
August 4, 2020
Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 4, 2020
postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL7 noarch postgresql-jdbc-9.2.1002-8.el7_8.noarch.rpm postgresql-jdbc-javadoc-9.2.1002-8.el7_8.noarch.rpm – Scientific Linux Development Team
August 4, 2020
security update
August 3, 2020
How much is your personal data worth on the dark web?
The going prices are lower than you probably think – your credit card details, for example, can sell for a few bucks The post How much is your personal data worth on the dark web? appeared first on WeLiveSecurity
August 3, 2020
An update that fixes one vulnerability is now available.
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
libvncserver: websocket decoding buffer overflow (CVE-2017-18922) SL7 x86_64 libvncserver-0.9.9-14.el7_8.1.i686.rpm libvncserver-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.i686.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-devel-0.9.9-14.el7_8.1.i686.rpm libvncserver-devel-0.9.9-14.el7_8.1.x86_64.rpm – Scientific Linux [More…]
August 3, 2020
Oh cool, more Cisco patches to apply. Happy Monday
August 3, 2020
An update that fixes one vulnerability is now available.
August 2, 2020
Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code.
August 2, 2020
It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language.
August 2, 2020
Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition.
August 2, 2020
In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in
August 2, 2020
Security fix for CVE-2020-15917 (STARTTLS protocol violation).
August 1, 2020
security update
August 1, 2020
Fix insufficient output escaping bug in file attachment names (CVE-2020-13625). References: – https://bugs.mageia.org/show_bug.cgi?id=26760
August 1, 2020
Twitter hack – three suspects charged in the US
August 1, 2020
An integer overflow in the getnum function in lua_struct.c CVE-2020-14147 References: – https://bugs.mageia.org/show_bug.cgi?id=26978
July 31, 2020
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. References:
July 31, 2020
Updated dnsmasq package fix insecure default configuration potentially making it an open resolver (CVE-2020-14312). In its default configuration, dnsmasq listen and answer query from any address even outside of the local subnet. Thus, it may inadvertently
July 31, 2020
Bypass of boundary checks in nio.Buffer via concurrent access. (CVE-2020-14583) Incomplete bounds checks in Affine Transformations. (CVE-2020-14593)
July 31, 2020
The CBC padding operations were not constant time and as a result would leak the length of the plaintext values which were being padded to an attacker running a side channel attack via shared resources such as cache or branch predictor. No information about the contents was leaked, but the length alone might be used […]
July 31, 2020
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
July 31, 2020
An update that fixes 10 vulnerabilities is now available.
July 31, 2020
An update that fixes one vulnerability is now available.
July 31, 2020
A flaw in PyCrypto allow remote attackers to obtain sensitive information.
July 31, 2020
Multiple vulnerabilities have been found in SNMP Trap Translator, the worst of which could allow attackers to execute arbitrary shell code.
July 31, 2020
Multiple vulnerabilities have been found in WebKitGTK+, the worst of which could result in the arbitrary execution of code.
July 31, 2020
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 31, 2020