It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
December 18, 2019
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user’s keyrings SL-6.10 * BUG: unable to handle kernel NULL pointer dereference at (null) * long I/O stalls with bnx2fc from not masking off scope bits of retry delay value SL6 x86_64 kernel-2.6.32-754.25.1.el6.x86_64.rpm kernel-debug-2.6.32-754.25.1.el6.x86_64. [More…]
December 18, 2019
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure (CVE-2015-9381) * freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read (CVE-2015-9382) SL6 x86_64 freetype-2.3.11-19.el6_10.i686.rpm freetype-2.3.11-19.el6_10.x86_64.rpm freet [More…]
December 18, 2019
An update for rh-maven35-apache-commons-beanutils is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 18, 2019
Security fix for CVE-2019-5544
December 18, 2019
An update that fixes 37 vulnerabilities is now available.
December 18, 2019
Rooster Teeth Attack Showcases New Magecart Approach
December 17, 2019
Type: Vulnerability. Avaya IP Office Application Server is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 17, 2019
Type: Vulnerability. Atlassian Application Links is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM API Connect is prone to a local information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. IBM Case Manager is prone to a cross-site scripting vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Apache Superset is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ and CS Series are prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. ZOHO ManageEngine EventLog Analyzer is prone to a security-bypass vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. SQLite is prone to multiple security vulnerabilities; fixes are available.
December 17, 2019
Type: Vulnerability. Mozilla Firefox is prone to a denial-of-service vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Ansible Tower is prone to an information-disclosure vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Broadcom CA Automic Sysload is prone to an arbitrary command-execution vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Linux Kernel is prone to a privilege-escalation vulnerability; fixes are available.
December 17, 2019
Type: Vulnerability. Omron PLC CJ, CS and NJ Series are prone to an authentication-bypass vulnerability; fixes are available.
December 17, 2019
Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts
December 17, 2019
Massive leak exposes browsing history of millions of users
December 17, 2019
Alexa, Google Home Eavesdropping Hack Not Yet Fixed
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
An update that fixes two vulnerabilities is now available.
December 17, 2019
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a
December 17, 2019
It’s time to disconnect RDP from the internet
Brute-force attacks and BlueKeep exploits usurp convenience of direct RDP connections; ESET releases a tool to test your Windows machines for vulnerable versions The post It’s time to disconnect RDP from the internet appeared first on WeLiveSecurity
December 17, 2019
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file access to execute arbitrary commands on the server.
December 17, 2019
An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 17, 2019
An update for freetype is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
December 17, 2019
security update
December 17, 2019
security update
December 17, 2019
security update
December 16, 2019
Type: Vulnerability. WordPress is prone to multiple security vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019
Type: Vulnerability. Dovecot is prone to a remote denial-of-service vulnerability; fixes are available.
December 16, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 16, 2019
Type: Vulnerability. Siemens SiNVR 3 is prone to multiple security vulnerabilities.
December 16, 2019
Type: Vulnerability. Apache SpamAssassin is prone to an arbitrary command-injection vulnerability and denial-of-service vulnerability; fixes are available.
December 16, 2019
Type: Vulnerability. Advantech DiagAnywhere is prone to multiple stack-based buffer-overflow vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities; fixes are available.
December 16, 2019
Type: Vulnerability. Multiple Cloud Foundry Products are prone to an information-disclosure vulnerability; fixes are available.
December 16, 2019
Echobot IoT Botnet Casts a Wide Net with Raft of Exploit Additions
December 16, 2019
The worst passwords of 2019: Did yours make the list?
These passwords may win the popularity contest but lose flat out in security The post The worst passwords of 2019: Did yours make the list? appeared first on WeLiveSecurity
December 16, 2019
N.J.’s Largest Hospital System Pays Up in Ransomware Attack
December 16, 2019
Stolen: Unencrypted hard drives with data of 29,000 Facebook employees
December 16, 2019
Your workmates might still be reading that ‘unshared’ Slack document
December 16, 2019
An update that solves 9 vulnerabilities and has one errata is now available.
December 16, 2019
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
December 16, 2019
An update for openshift-enterprise-console-container is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 16, 2019
An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 16, 2019
An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
December 16, 2019
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 16, 2019
How safe is business data stored in third-party supplier websites?
December 15, 2019
security update
December 15, 2019
security update
December 15, 2019
security update
December 15, 2019
An update that contains security fixes can now be installed.
December 15, 2019
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For the oldstable distribution (stretch), these problems have been fixed
December 15, 2019
Popular forms of cybercrime you should be aware of
December 14, 2019
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
December 14, 2019
70% of the entire US population is now on Facebook
December 14, 2019
Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server.
December 14, 2019
A vulnerability has been found in php-horde, the Horde Application Framework, which may result in information disclosure via cross-site scripting.
December 13, 2019
GitLab Doles Out Half a Million Bucks to White Hats
December 13, 2019
This update provides an update to 5.4 series kernels, currently based on upstream 5.4.2, adding support for new hardware and features, and fixing atleast the following security issue: KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
December 13, 2019
Updated ncurses packages fix security vulnerabilities: Heap-based buffer over-read in the _nc_find_entry function (CVE-2019-17594).
December 13, 2019
Updated signing-party package fixes security vulnerability: The gpg-key2ps tool in signing-party contained an unsafe shell call enabling shell injection via a User ID (CVE-2019-11627).
December 13, 2019
Pairing Privacy and Security with Digital Identities in Retail
December 13, 2019
Reading Time: ~ 4 min. The holiday shopping season is prime time for digital purchases and cybercriminals are cashing in on the merriment. With online shopping officially becoming more popular than traditional in-store visits this year, all signs point to an increase in cyberattacks. It’s more important than ever to be mindful of potential dangers […]
December 13, 2019
Type: Vulnerability. OpenBSD is prone to a local privilege escalation vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Atlassian FishEye and Crucible are prone to a cross-site scripting vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Redhat 3scale API Management is prone to an information-disclosure vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. McAfee TechCheck is prone to an arbitrary code-execution vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. IBM Cloud Pak System is prone to multiple security vulnerabilities; fixes are available.
December 13, 2019
Type: Vulnerability. Linux Kernel is prone to an information disclosure vulnerability.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a local privilege-escalation vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. Xen is prone to a denial-of-service vulnerability; fixes are available.
December 13, 2019
Type: Vulnerability. IBM Spectrum Scale is prone to a cross-site scripting vulnerability; fixes are available.
December 13, 2019
Elegant sLoad Carries Out Spying, Payload Delivery in BITS
December 13, 2019
Critical Bug in WordPress Plugins Open Sites to Hacker Takeovers
December 13, 2019
Hundreds of counterfeit branded shoe stores hacked with web skimmer
December 13, 2019
An update that fixes one vulnerability is now available.
December 13, 2019
An update that fixes one vulnerability is now available.
December 13, 2019
Risk Level: Very Low. Type: Trojan.
December 13, 2019
FIN8 Targets Card Data at Fuel Pumps
December 13, 2019
Reading Time: ~ 2 min. Zeppelin Ransomware Spreading Over the last month, researchers have been monitoring the spread of a new ransomware variant, Zeppelin. This is the latest version of the ransomware-as-a-service that started life as VegaLocker/Buran and has differentiated itself by focusing on healthcare and IT organizations in both the U.S. and Europe. This […]
December 13, 2019