Type: Vulnerability. The Booking and Availability Management Tools module for Drupal is prone to an access-bypass vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. ISC BIND is prone to an authentication-bypass vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Schneider Electric ProClima is prone to multiple remote code-execution vulnerabilities; fixes are available.
October 23, 2019
Type: Vulnerability. NetApp SnapManager for Oracle is prone to an unspecified local information-disclosure vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Fortinet FortiMail is prone to multiple remote privilege-escalation vulnerability; fixes are available.
October 23, 2019
Type: Vulnerability. Trend Micro Anti-Threat Toolkit is prone to a remote code-execution vulnerability.
October 23, 2019
Bedside Hotel Robot Hacked to Stream In-Room Video
October 23, 2019
Reading Time: ~ 3 min. Entrepreneur Jim Rohn once said, “Time is more valuable than money. You can get more money, but you cannot get more time.” I think anyone involved in running a business can relate to this statement, but it carries a particularly deep meaning to those of us who deal with cybersecurity. […]
October 23, 2019
Fujitsu Wireless Keyboard Plagued By Unpatched Flaws
October 23, 2019
An update that solves 16 vulnerabilities and has four fixes is now available.
October 23, 2019
Firefox, Chrome Bugs Allow Arbitrary Code-Execution
October 23, 2019
Alexa and Google Home phishing apps demonstrated by researchers
October 23, 2019
Hacker breached servers used by NordVPN
October 23, 2019
The package pacman before version 5.2.0-1 is vulnerable to arbitrary command execution.
October 23, 2019
The package go before version 2:1.13.3-1 is vulnerable to denial of service.
October 23, 2019
The package go-pie before version 2:1.13.3-1 is vulnerable to denial of service.
October 23, 2019
The package xpdf before version 4.02-1 is vulnerable to arbitrary code execution.
October 23, 2019
Facebook pulls fake news networks linked to Russia and Iran
October 23, 2019
15 Years Later, Metasploit Still Manages to be a Menace
October 23, 2019
An update that solves one vulnerability and has one errata is now available.
October 23, 2019
An update that fixes one vulnerability is now available.
October 23, 2019
Travel database exposed PII on US government employees
October 23, 2019
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 23, 2019
Smart cities must be cyber‑smart cities
As cities turn to IoT to address long-standing urban problems, what are the risks of leaving cybersecurity behind at the planning phase? The post Smart cities must be cyber‑smart cities appeared first on WeLiveSecurity
October 23, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3157
October 23, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:2964
October 23, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3127
October 23, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3128
October 23, 2019
security update
October 22, 2019
security update
October 22, 2019
FTC Cracks Down on Stalkerware With Retina-X App Bans
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. IBM Maximo Anywhere is prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA122 ATA with Router Devices are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to an information disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Multiple Sonatype Products are prone to an unspecified remote code execution vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to multiple HTML-injection vulnerabilities; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple cross-site scripting vulnerabilities; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to a remote denial-of-service vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. CA Performance Management is prone to a security-bypass vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Broken Link Checker plugin for WordPress is prone to a cross-site scripting vulnerability.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Small Business Smart and Managed Switches are prone to a cross-site scripting vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. TYPO3 freeCap CAPTCHA extension is prone to a remote code-execution vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Aironet Access Points are prone to a denial-of-service vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to an HTML-injection vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Linux Kernel is prone to a buffer-overflow vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco SPA100 Series Analog Telephone Adapters are prone to an information-disclosure vulnerability; fixes are available.
October 22, 2019
Type: Vulnerability. Cisco TelePresence CE Software is prone to a local command-injection vulnerability; fixes are available.
October 22, 2019
No ‘Silver Bullet’ Fix for Alexa, Google Smart Speaker Hacks
October 22, 2019
Magecart 5 Linked to Carbanak Gang
October 22, 2019
An update that fixes three vulnerabilities is now available.
October 22, 2019
An update that fixes one vulnerability is now available.
October 22, 2019
US nuclear weapons command finally ditches 8-inch floppies
October 22, 2019
Storing your stuff securely in the cloud
October 22, 2019
NordVPN reveals breach at datacenter provider
The company says that the incident, going back to March 2018, affected only 1 out of its 3,000 servers The post NordVPN reveals breach at datacenter provider appeared first on WeLiveSecurity
October 22, 2019
An update that solves 40 vulnerabilities and has 225 fixes is now available.
October 22, 2019
Vatican launches smart rosary – complete with brute-force flaw
October 22, 2019
Survey Finds People are Privacy Hypocrites
October 22, 2019
Woman ordered to type in iPhone passcode so police can search device
October 22, 2019
An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 and Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 22, 2019
An update that solves one vulnerability and has 21 fixes is now available.
October 22, 2019
An update that fixes one vulnerability is now available.
October 22, 2019
Google chief warns visitors about smart speakers in his home
October 22, 2019
OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989) * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945) * OpenJDK: NULL pointer dereferen [More…]
October 22, 2019
An update is now available for Red Hat Satellite 6.6 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
October 22, 2019
OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989) * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945) * OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019- [More…]
October 22, 2019
An update for python is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
October 22, 2019
An update for wget is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
October 22, 2019
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 22, 2019
Action Fraud? Inaction Fraud
October 21, 2019
Gustuff Android Banker Switches Up Technical Approach
October 21, 2019
security update
October 21, 2019
U.S. Government, Military Personnel Data Leaked By Autoclerk
October 21, 2019
Type: Vulnerability. Cisco Expressway Series and Telepresence VCS are prone to a cross-site scripting vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to multiple local arbitrary file-overwrite vulnerabilities; fixes are available.
October 21, 2019
Type: Vulnerability. Apache Thrift is prone to a denial-of-service vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to a local arbitrary file-write vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco TelePresence Collaboration Endpoint Software is prone to a local privilege-escalation vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Cisco Wireless LAN Controller Software is prone to a local directory-traversal vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. AVEVA IEC870IP Driver for Vijeo Citect and Citect SCADA is prone to a stack-based buffer-overflow vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Apache Thrift is prone to a remote security vulnerability; fixes are available.
October 21, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 21, 2019