Type: Vulnerability. Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Cisco Unified Contact Center Express is prone to an HTTP response-splitting vulnerability; fixes are available.
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Cisco Adaptive Security Appliance is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Moxa EDR 810 Series is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability; fixes are available.
The package ruby2.5 before version 2.5.7-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, cross-site scripting, denial of service and insufficient validation.
The package ruby-rdoc before version 6.1.2-1 is vulnerable to cross- site scripting.
An update that fixes 27 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes 27 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that solves one vulnerability and has two fixes is now available.
Reading Time: ~ 2 min. DoorDash Data Breach Nearly five months after a breach, DoorDash has just now discovered that unauthorized access to sensitive customer information has taken place. Among the stolen data were customer names, payment history, and contact info, as well as the last four digits of both customer payment cards and employee […]
Several security issues were fixed in the Linux kernel.
A vulnerability was discovered by Lukas Kupczyk of the Advanced Research Team at CrowdStrike Intelligence in OpenConnect, an open client for Cisco AnyConnect, Pulse, GlobalProtect VPN. A malicious HTTP server
An update that fixes one vulnerability is now available.
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple remote code-execution vulnerabilities; fixes are available.
Type: Vulnerability. Cisco FXOS and Firepower Threat Defense Software are prone to multiple local command-injection vulnerabilities; fixes are available.
Type: Vulnerability. Cisco Firepower Threat Defense Software is prone to multiple security-bypass vulnerabilities; fixes are available.
Type: Vulnerability. Multiple Cisco Unified Communications Products are prone to a cross-site request-forgery vulnerability.
Type: Vulnerability. Cisco Firepower Management Center is prone to a remote code-execution vulnerability; fixes are available.
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple SQL-injection vulnerabilities; fixes are available.
Type: Vulnerability. Cisco Firepower Management Center is prone to a command-injection vulnerability; fixes are available
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a remote code-execution vulnerability; fixes are available.
Type: Vulnerability. Google Chrome OS is prone to a remote integer-overflow vulnerability; fixes are available.
Type: Vulnerability. WhatsApp is prone to an integer overflow vulnerability.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a remote command-injection vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a command-injection vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a hard-coded credentials vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to a security vulnerability; fixes are available.
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to an SQL-injection vulnerability; fixes are available.
Type: Vulnerability. Linux Kernel is prone to a denial-of-service vulnerability; fixes are available.
Updated thunderbird packages fix security vulnerability: Spoofing a message author via a crafted S/MIME message (CVE-2019-11755) It also fixes various other bugs, as listed in the releasenotes.
The incidents send medical staff back to the days of pen and paper The post Hospitals in US, Australia hobbled by ransomware appeared first on WeLiveSecurity
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
patch: do_ed_script in pch.c does not block strings beginning with a ! character (CVE-2018-20969) * patch: OS shell command injection when processing crafted patch files (CVE-2019-13638) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SL7 […]
An update that solves two vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in ClamAV.
An update for patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
Número dois in our series demystifying Latin American banking trojans The post Casbaneiro: Dangerous cooking with a secret ingredient appeared first on WeLiveSecurity
It was discovered that there was a remotely-exploitable null pointer dereference in libapreq2, a library for manipulating HTTP requests. For Debian 8 “Jessie”, this issue has been fixed in libapreq2 version
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. EMC RSA BSAFE Crypto-C Micro and Micro Edition Suite are prone to multiple security vulnerabilities; fixes are available.
Security fix for CVE-2019-15026
Security fix for CVE-2019-13132
**GLPI version 9.4.4** This is a **security release**, upgrading is highly recommended Non exhaustive list of changes: * [security] Prevent account takeover vulnerability , * [security] Prevent execution of XSS on rich text, * fix cache key lenght issues, * fix user picture removal at login, * several fixes on recurring tickets, * fix some […]
security update
security update
Type: Vulnerability. Microsoft Windows is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Jenkins is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Pivotal Application Service is prone to an access-bypass vulnerability; fixes are available.
Type: Vulnerability. Foxit Reader is prone to a remote code-execution vulnerability.
