Type: Vulnerability. Google Android is prone to multiple security vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. WordPress is prone to multiple security vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. Juniper Junos is prone to a session-fixation vulnerability; fixes are available.
October 15, 2019
Type: Vulnerability. Sudo is prone to a security-bypass vulnerability; fixes are available.
October 15, 2019
Type: Vulnerability. Siemens SINEMA Remote Connect Server is prone to multiple security vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. Redhat Wildfly is prone to a privilege-escalation; fixes are available.
October 15, 2019
Type: Vulnerability. Juniper Junos is prone to an HTML-injection vulnerability; fixes are available.
October 15, 2019
Risk Level: Very Low. Type: Trojan.
October 15, 2019
Streaming devices track viewing habits, study finds
Do you know what kind of data your streaming device may be collecting while you binge watch? The post Streaming devices track viewing habits, study finds appeared first on WeLiveSecurity
October 15, 2019
An update that fixes one vulnerability is now available.
October 15, 2019
An update that solves one vulnerability and has three fixes is now available.
October 15, 2019
An update that fixes two vulnerabilities is now available.
October 15, 2019
An update that fixes one vulnerability is now available.
October 15, 2019
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 15, 2019
An update for jss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 15, 2019
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
October 15, 2019
A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 15, 2019
A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 15, 2019
Pitney Bowes Hit with Ransomware Attack
October 15, 2019
A Deepfake Deep Dive into the Murky World of Digital Imitation
October 15, 2019
Aspell could be made to expose sensitive information if it received a specially crafted input.
October 15, 2019
An update that fixes 83 vulnerabilities is now available.
October 15, 2019
An update that fixes one vulnerability is now available.
October 15, 2019
Type: Vulnerability. Adobe Experience Manager Forms is prone to a cross-site scripting vulnerability; fixes are available.
October 15, 2019
Type: Vulnerability. Adobe Experience Manager is prone to multiple security vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. Adobe Acrobat and Reader are prone to multiple information-disclosure vulnerabilities; fixes are available.
October 15, 2019
Type: Vulnerability. Juniper Junos is prone to a local authorization-bypass vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Google Chrome is prone to multiple security vulnerabilities; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to multiple cross-site scripting and memory-corruption vulnerabilities; fixes are available.
October 14, 2019
Type: Vulnerability. Apple Swift is prone to an information-disclosure vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Apple macOS/iCloud for Windows/iTunes are prone to a buffer overflow vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to an information-disclosure and a security vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. WebKit is prone to a memory-corruption vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Juniper Junos is prone to a local privilege-escalation vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 14, 2019
Type: Vulnerability. Apple macOS is prone to multiple security vulnerabilities; fixes are available.
October 14, 2019
Apple Shares Some Browsing History with Chinese Company
October 14, 2019
Connecting the dots: Exposing the arsenal and methods of the Winnti Group
New ESET white paper released describing updates to the malware arsenal and campaigns of this group known for its supply-chain attacks The post Connecting the dots: Exposing the arsenal and methods of the Winnti Group appeared first on WeLiveSecurity
October 14, 2019
Imperva cloud firewall pwned, D-Link bug uncovered – plus more
October 14, 2019
An update that fixes 5 vulnerabilities is now available.
October 13, 2019
An update that fixes 5 vulnerabilities is now available.
October 13, 2019
This update provides the final 1.3.2 release (previously the package was 1.3.2 beta). It also includes the previously-omitted database schema directory (resolving [#1415753](https://bugzilla.redhat.com/show_bug.cgi?id=1415753)) and rddmarc tools, and backports proposed fixes for a [crasher bug](https://bugzilla.redhat.com/show_bug.cgi?id=1673293) and [security issue
October 13, 2019
Backport security fixes from [PR#145](https://github.com/libming/libming/pull/145) Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132
October 13, 2019
Patch CVE-2019-12412.
October 13, 2019
– Rebase radare2 to 3.9.0 – Rebase cutter-re to 1.9.0 – fix CVE-2019-14745 in radare2 on F30
October 13, 2019
– Rebase radare2 to 3.9.0 – Rebase cutter-re to 1.9.0 – fix CVE-2019-14745 in radare2 on F30
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
– Update jackson-parent to version 2.10. – Update jackson-bom to version 2.10.0. – Update jackson-annotations to version 2.10.0. – Update jackson-core to version 2.10.0. – Update jackson-databind to version 2.10.0. Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942, CVE-2019-16943.
October 13, 2019
The update for openssl released as DSA 4539-1 introduced a regression where AES-CBC-HMAC-SHA ciphers were not enabled. Updated openssl packages are now available to correct this issue.
October 13, 2019
Update to latest upstream version.
October 12, 2019
Software, Supply-Chain Dangers Top List of 5G Cyber Risks
October 11, 2019
Type: Vulnerability. Intel Active System Console is prone to a local privilege-escalation vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Intel Smart Connect Technology is prone to a local privilege-escalation vulnerability.
October 11, 2019
Type: Vulnerability. Multiple Intel NUC Products are prone to multiple unspecified local security vulnerabilities; fixes are available
October 11, 2019
Type: Vulnerability. Juniper SBR Carrier is prone to an information-disclosure vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Type: Vulnerability. Juniper Junos is prone to a denial-of-service vulnerability; fixes are available.
October 11, 2019
Imperva: Data Breach Caused by Cloud Misconfiguration
October 11, 2019
A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data
October 11, 2019
An update that fixes one vulnerability is now available.
October 11, 2019
Fin7 Cybergang Retools With New Malicious Code
October 11, 2019
Reading Time: ~ 2 min. E-Scooter Security Vulnerability A security researcher recently found an API vulnerability within the software of Voi e-scooters that allowed him to add over $100,000 in ride credits to his account. The vulnerability stems from a lack of authentication after creating an account which allows users to enter an unlimited number […]
October 11, 2019
Iran-Linked ‘Charming Kitten’ Touts New Spearphishing Tactics
October 11, 2019
ruby-openid performed discovery first, and then verification. This allowed an attacker to change the URL used for discovery and trick the server into connecting to the URL. This server in turn could be a private server not publicly accessible.
October 11, 2019
Type: Vulnerability. Oracle has released an advance notification regarding the October 2019 Critical Patch Update that addresses 240 new vulnerabilities.
October 11, 2019
vBulletin Flaw Exploited in Dutch Sex-Work Forum Breach
October 10, 2019
Reading Time: ~ 4 min. Online games aren’t new. Consumers have been playing them since as early as 1960. However, the market is evolving—games that used to require the computing power of dedicated desktops can now be powered by smartphones, and online gaming participation has skyrocketed. This unfortunately means that the dangers of online gaming […]
October 10, 2019
Risk Level: Very Low.
October 10, 2019
Sophisticated Spy Kit Targets Russians with Rare GSM Plugin
October 10, 2019
China’s Sway Over Tech Companies Tested with Apple, Blizzard
October 10, 2019
Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign
October 10, 2019
HP Touchpoint Analytics Opens PCs to Code Execution Attack
October 10, 2019
Fix KDC crash when logging PKINIT enctypes (CVE-2019-14844) This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident.
October 10, 2019
Update to 2.0.10 to fix security issues.
October 10, 2019
An update for ovirt-web-ui is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
An update for ovirt-engine-ui-extensions is now available for Red Hat Virtualization Engine 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
October 10, 2019
Several security issues were fixed in Python.
October 10, 2019
Octavia could allow unintended access to network services.
October 10, 2019
ESET discovers Attor, a spy platform with curious GSM fingerprinting
ESET researchers discover a previously unreported cyberespionage platform used in targeted attacks against diplomatic missions and governmental institutions, and privacy-concerned users The post ESET discovers Attor, a spy platform with curious GSM fingerprinting appeared first on WeLiveSecurity
October 10, 2019
It was discovered that clamav, the open source antivirus engine, is affected by the following security vulnerabilities: CVE-2019-12625
October 10, 2019