Type: Vulnerability. Fortinet FortiClient for macOS is prone to a local information-disclosure vulnerability; fixes are available.
November 11, 2019
Type: Vulnerability. Apache CXF is prone to a denial-of-service vulnerability and an unauthorized access vulnerability; fixes are available.
November 11, 2019
Type: Vulnerability. Multiple Medtronic Products are prone to multiple security vulnerabilities; fixes are available.
November 11, 2019
Type: Vulnerability. Multiple Medtronic Products are prone to multiple security vulnerabilities; fixes are available.
November 11, 2019
Type: Vulnerability. Philips Tasy EMR is prone to an information-disclosure vulnerability; fixes are available.
November 11, 2019
Type: Vulnerability. Philips Tasy EMR is prone to a cross-site scripting vulnerability.
November 11, 2019
Type: Vulnerability. Linux Kernel is prone to multiple denial-of-service vulnerabilities; fixes are available.
November 11, 2019
Type: Vulnerability. Fuji Electric V-Server is prone to multiple unspecified heap-based buffer overflow vulnerabilities; fixes are available.
November 11, 2019
First BlueKeep attacks prompt fresh warnings
The infamous vulnerability has been exploited for a cryptocurrency mining campaign, but more damaging attacks may still be in store The post First BlueKeep attacks prompt fresh warnings appeared first on WeLiveSecurity
November 11, 2019
Ransomware Attack Downs Hosting Service SmarterASP.NET
November 11, 2019
BlueKeep: What you need to know
November 11, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 11, 2019
Encrypted Emails on macOS Found Stored in Unprotected Way
November 11, 2019
Several vulnerabilities were discovered in Ampache, a web-based audio file management system.
November 11, 2019
Bash could be made to crash or execute arbitrary code if it received a specially crafted input.
November 11, 2019
In haml, when using user input to perform tasks on the server, characters like ” ‘ must be escaped properly. In this case, the ‘ character was missed. An attacker can manipulate the input to introduce additional
November 10, 2019
fixed multiple security bugs
November 10, 2019
Security fix CVE-2019-16275 (AP mode PMF disconnection protection bypass)
November 10, 2019
Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.
November 10, 2019
An update that contains security fixes can now be installed.
November 10, 2019
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure, cross-site scripting or denial of service.
November 10, 2019
An update that fixes two vulnerabilities is now available.
November 10, 2019
An update that fixes two vulnerabilities is now available.
November 10, 2019
fixed multiple security bugs
November 9, 2019
Fix CVE-2019-3463, CVE-2019-3464 and CVE-2019-1000018.
November 9, 2019
– fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218)
November 9, 2019
Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes – https://developer.mozilla.org/en- US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes
November 9, 2019
An update that solves two vulnerabilities and has one errata is now available.
November 9, 2019
An update that fixes one vulnerability is now available.
November 9, 2019
An update that fixes one vulnerability is now available.
November 9, 2019
An update that solves two vulnerabilities and has three fixes is now available.
November 9, 2019
An update that fixes one vulnerability is now available.
November 9, 2019
An update that fixes 9 vulnerabilities is now available.
November 9, 2019
An update that fixes 9 vulnerabilities is now available.
November 9, 2019
An update that fixes 9 vulnerabilities is now available.
November 9, 2019
An update that fixes 9 vulnerabilities is now available.
November 9, 2019
An update that solves three vulnerabilities and has four fixes is now available.
November 9, 2019
An update that fixes one vulnerability is now available.
November 9, 2019
GDAL through 3.0.1 had a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold was exceeded.
November 9, 2019
Platinum APT Shines Up New Titanium Backdoor
November 8, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a local security-bypass vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Small Business SPA500 Series IP Phones are prone to a local command-injection vulnerability;fixes are available.
November 8, 2019
Type: Vulnerability. Multiple Cisco WebEx products are prone to multiple local code-execution vulnerabilities; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Webex Meetings is prone to a remote privilege-escalation vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a remote privilege-escalation vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Managed Services Accelerator is prone to an open-redirection vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Small Business RV Series Routers are prone to an arbitrary command-execution vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Small Business RV Series Routers are prone to a remote command injection vulnerability; fixes are available.
November 8, 2019
Type: Vulnerability. Cisco Web Security Appliance is prone to a cross-site scripting vulnerability; fixes are available.
November 8, 2019
Art Imitates Life: Lessons from the Final Season of Mr. Robot
November 8, 2019
New kernel packages are available for Slackware 14.2 to fix security issues.
November 8, 2019
Reading Time: ~ 2 min. BEC Scam Takes Millions from Nikkei America Officials for Nikkei are working to identify the perpetrators of a recent business email compromise (BEC) scam that took roughly $29 million from the company’s American subsidiary. The illicit transfer took place sometime during the end of September and, though they did make […]
November 8, 2019
Amazon Fixes Ring Video Doorbell Flaw That Leaked Wi-Fi Credentials
November 8, 2019
An update that fixes one vulnerability is now available.
November 8, 2019
Applications using FriBidi could be made to crash or run programs as your login if it displayed specially crafted text.
November 8, 2019
security update
November 8, 2019
Alex Murray discovered a stack-based buffer overflow vulnerability in fribidi, an implementation of the Unicode Bidirectional Algorithm algorithm, which could result in denial of service or potentially the execution of arbitrary code, when processing a large number of unicode
November 7, 2019
security update
November 7, 2019
Ex-Twitter Employees Spied on Saudi Dissidents: DoJ
November 7, 2019
It was discovered that Expat did not properly handle internal entities closing the doctype, potentially resulting in denial of service or information disclosure if a malformed XML file is processed (CVE-2019-15903).
November 7, 2019
Chromium-browser 78.0.3904.87 fixes security issues: Multiple flaws were found in the way Chromium 77.0.3865.120 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose
November 7, 2019
Updated freetds packages fix security vulnerability: Felix Wilhelm discovered that FreeTDS incorrectly handled certain types after a protocol downgrade. A remote attacker could use this issue to cause FreeTDS to crash, resulting in a denial of service, or possibly
November 7, 2019
Updated python and python3 packages fix security vulnerabilities: It was discovered that Python incorrectly parsed certain email addresses. A remote attacker could possibly use this issue to trick Python applications into accepting email addresses that should be denied (CVE-2019-16056).
November 7, 2019
Updated unbound packages fix security vulnerability: Versions before 1.9.4 allow accesses to uninitialized memory, which would permit remote attackers to trigger a crash (CVE-2019-16866).
November 7, 2019
The updated packages fix security issues: Use-after-free when creating index updates in IndexedDB. (CVE-2019-11757)
November 7, 2019
The updated packages fix several bugs and some security issues: Use-after-free when creating index updates in IndexedDB. (CVE-2019-11757)
November 7, 2019
Updated proftpd package fixes security vulnerabilities: It was discovered that the mod_copy module of ProFTPD, a FTP/SFTP/FTPS server, performed incomplete permission validation for the CPFR/CPTO commands (CVE-2019-12815).
November 7, 2019
Type: Vulnerability. Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability; fixes are available.
November 7, 2019
Type: Vulnerability. Cisco Web Security Appliance is prone to an unauthorized-access vulnerability; fixes are available
November 7, 2019
Type: Vulnerability. Multiple Cisco Products are prone to an remote code-execution vulnerability; fixes are available.
November 7, 2019
Type: Vulnerability. Cisco TelePresence Advanced Media Gateway is prone to a remote denial-of-service vulnerability.
November 7, 2019
Type: Vulnerability. Cisco Industrial Network Director is prone to a cross-site scripting vulnerability; fixes are available.
November 7, 2019
Type: Vulnerability. libarchive is prone to an arbitrary code-execution vulnerability; fixes are available.
November 7, 2019
Type: Vulnerability. Google Android is prone to multiple local privilege-escalation vulnerabilities.
November 7, 2019
Type: Vulnerability. Google Android is prone to multiple security vulnerabilities; fixes are available.
November 7, 2019
Type: Vulnerability. Google Android is prone to multiple local privilege-escalation vulnerabilities; fixes are available.
November 7, 2019
Type: Vulnerability. Joomla! Core is prone to an information-disclosure vulnerability; fixes are available.
November 7, 2019
Amazon Kindle, Embedded Devices Open to Code-Execution
November 7, 2019
Gamers Hit with Nvidia GPU Driver, GeForce Flaws
November 7, 2019
How to Secure Critical Infrastructure When Patching Isn’t Possible
November 7, 2019
The package linux-hardened before version 5.3.7.b-1 is vulnerable to arbitrary code execution.
November 7, 2019
Data Breach Fines: Are They Working to Boost Consumer Safety?
November 7, 2019
Google Enlists Help to Fight Bad Android Apps
November 7, 2019
An update for cri-o is now available for Red Hat OpenShift Container Platform 3.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
November 7, 2019
An update for mediawiki123 is now available for Red Hat OpenShift Container Platform 3.9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which
November 7, 2019
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
November 7, 2019