November 18, 2019
WhatsApp Remote Code Execution Triggered by Videos
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code execution via unserialization.
November 18, 2019
The Unhappiest Subscribers on Earth? Disney+ Accounts Hacked & Hijacked
November 18, 2019
security update
November 18, 2019
security update
November 18, 2019
Type: Vulnerability. Teamviewer is prone to a remote security vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. Intel Ethernet 700 Series Controllers are prone to a buffer-overflow vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. McAfee Advanced Threat Defense is prone to multiple security vulnerabilities; fixes are available.
November 18, 2019
Type: Vulnerability. Multiple Siemens Products are prone to an unspecified denial-of-service vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. Multiple Siemens Products are prone to a security vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. Multiple ABB products are prone to an authentication-bypass vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. McAfee Data Loss Prevention is prone to an information-disclosure vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. FriBidi is prone to a stack-based buffer-overflow vulnerability; fixes are available.
November 18, 2019
Type: Vulnerability. Siemens SIMATIC S7-1200 is prone to a local unauthorized-access vulnerability.
November 18, 2019
Type: Vulnerability. Fortinet FortiOS is prone to an local information-disclosure vulnerability; fixes are available.
November 18, 2019
Office 365 Admins Targeted in Ongoing Phishing Scam
November 18, 2019
Interpol: Strong encryption helps paedos. Build backdoors
November 18, 2019
Disney+ accounts hijacked – How to protect yourself
As users are losing access to their accounts by the dozens, we offer a few tips to help keep your streaming subscriptions safe The post Disney+ accounts hijacked – How to protect yourself appeared first on WeLiveSecurity
November 18, 2019
Pipka Card Skimmer Removes Itself After Infecting eCommerce Sites
November 18, 2019
Earlier versions of this package package were vulnerable to Cross-site Scripting (XSS) due to no proper sanitization of xlink:href attributes.
November 18, 2019
An update that solves one vulnerability and has 22 fixes is now available.
November 18, 2019
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or denial of service. Debian follows the Thunderbird upstream releases. Support for the 60.x series
November 18, 2019
An update is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 18, 2019
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 18, 2019
A security vulnerability was found in libapache2-mod-auth-openidc, the OpenID Connect authentication module for the Apache HTTP server. Insufficient validation of URLs leads to an Open Redirect
November 18, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 18, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 18, 2019
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
November 18, 2019
Several security issues were fixed in python-ecdsa.
November 18, 2019
Several security issues were fixed in MySQL.
November 18, 2019
An update for libcomps is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 18, 2019
New kernel packages are available for Slackware 14.2 to fix security issues.
November 17, 2019
A vulnerability was discovered in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker, allowing a malicious MQTT client to cause a denial of service (stack overflow and daemon crash), by sending a specially crafted SUBSCRIBE packet containing a topic with a extremely
November 17, 2019
VCPUOP_initialise DoS [XSA-296, CVE-2019-18420] missing descriptor table limit checking in x86 PV emulation [XSA-298, CVE-2019-18425] Issues with restartable PV type change operations [XSA-299, CVE-2019-18421] (#1767726) add-to-physmap can be abused to DoS Arm hosts [XSA-301, CVE-2019-18423] passed through PCI devices may corrupt host memory after deassignment [XSA-302, CVE-2019-18424]
November 16, 2019
8u232 update
November 16, 2019
Security fix for CVE-2019-15142, CVE-2019-15143, CVE-2019-15144 and CVE-2019-15145.
November 16, 2019
Update to 1.1.20
November 16, 2019
Security fix for CVE-2019-16275
November 16, 2019
Rich Mirch discovered that the pg_ctlcluster script didn’t drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.
November 16, 2019
An update that fixes 11 vulnerabilities is now available.
November 16, 2019
GitHub makes CodeQL free for research and open source
November 15, 2019
security update
November 15, 2019
security update
November 15, 2019
Security fix for CVE-2019-14664, CVE-2019-12269 and compatibility with Thunderbird 68
November 15, 2019
Update to Samba 4.10.10 – Security fixes for CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
November 15, 2019
Type: Vulnerability. Philips IntelliBridge EC40 and EC80 is prone to an unauthorized-access vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. Multiple Veritas products are prone to an arbitrary command-injection vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. Multiple Siemens Products are prone to a denial-of-service vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. Siemens Desigo PX is prone to denial of service vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. Redhat Syndesis is prone to an information-disclosure vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. McAfee Threat Intelligence Exchange Server is prone to an unauthorized-access vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. OpenStack Mistral is prone to a local information-disclosure vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. McAfee Total Protection is prone to a local privilege-escalation vulnerability; fixes are available.
November 15, 2019
Type: Vulnerability. Exim is prone to an arbitrary code-execution vulnerability; fixes are available.
November 15, 2019
Update to latest stable (78.0.3904.97). This build contains a number of bug fixes and security updates. Changes can be viewed here: https://chromium.googles ource.com/chromium/src/+log/78.0.3904.86..78.0.3904.92?n=10000
November 15, 2019
James Clapper: Lessons Learned in a Post-Snowden World
November 15, 2019
Stealthy Malware Flies Under AV Radar with Advanced Obfuscation
November 15, 2019
An update that solves one vulnerability and has two fixes is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 15, 2019
Reading Time: ~ 2 min. Orvis Internal Credentials Leaked A database containing login credentials for numerous internal systems belonging to Orvis, one of America’s oldest retailers, was found to be publicly available for an unknown amount of time. Why the database was publicly accessible at all is still unclear, but the retailer has determined that […]
November 15, 2019
An update that contains security fixes can now be installed.
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that solves 49 vulnerabilities and has two fixes is now available.
November 15, 2019
Tim Brown discovered a shared memory permissions vulnerability in the Mesa 3D graphics library. Some Mesa X11 drivers use shared-memory XImages to implement back buffers for improved performance, but Mesa
November 15, 2019
An update that fixes one vulnerability is now available.
November 15, 2019
An update that fixes 11 vulnerabilities is now available.
November 15, 2019
Double Vision: Stealthy Malware Dropper Delivers Dual RATs
November 14, 2019
Type: Vulnerability. Google Pixel is prone to a privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Magento CMS is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Lenovo ThinkPad is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Drupal Open Social is prone to a session-fixation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. IBM Spectrum Protect Plus is prone to insecure file-permission vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. systemd is prone to an security-bypass vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Lenovo is prone to a remote code-execution vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. IBM QRadar SIEM is prone to an unspecified cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX Add-on is prone to a cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX is prone to multiple unspecified cross-site scripting vulnerabilities; fixes are available.
November 14, 2019
Type: Vulnerability. Intel Xeon Scalable Processors are prone to a denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Envoy is prone to a remote denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. TIBCO EBX Add-on is prone to a cross-site scripting vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Istio is prone to a remote denial-of-service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Intel Processors are prone to a denial of service vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. VMware Workstation and Fusion are prone to multiple security vulnerabilities; fixes are available
November 14, 2019
Type: Vulnerability. Trusted Platform Module is prone to an unspecified security vulnerability; fixes are available.
November 14, 2019
Type: Vulnerability. Multiple Intel Products are prone to a denial-of-service vulnerability; fixes are available.
November 14, 2019