Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
March 12, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
March 12, 2019
Type: Vulnerability. Microsoft Windows is prone to a remote denial of service vulnerability; fixes are available.
March 12, 2019
Type: Vulnerability. Microsoft Windows is prone to a local privilege-escalation vulnerability; fixes are available.
March 12, 2019
Type: Vulnerability. Microsoft Edge is prone to a remote memory-corruption vulnerability; fixes are available.
March 12, 2019
Several security vulnerabilities were discovered in Zabbix, a server/client network monitoring solution. CVE-2016-10742
March 11, 2019
The package pacman before version 5.1.3-1 is vulnerable to arbitrary code execution.
March 11, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0462
March 11, 2019
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
March 11, 2019
security update
March 11, 2019
Google Patches Critical Bluetooth RCE Bug
March 11, 2019
Citrix hackers may have stolen six terabytes worth of files
March 11, 2019
Over 2 billion records exposed by email marketing firm
The repository of email addresses and other records would offer a gold mine of data for scammers The post Over 2 billion records exposed by email marketing firm appeared first on WeLiveSecurity
March 11, 2019
poppler could be made to crash if it opened a specially craftedfile.
March 11, 2019
Why Your Email Security Solution May Not Be Enough
March 11, 2019
Gaming industry still in the scope of attackers in Asia
Asian game developers again targeted in supply-chain attacks distributing malware in legitimately signed software The post Gaming industry still in the scope of attackers in Asia appeared first on WeLiveSecurity
March 11, 2019
A vulnerability in GNU Wget which could allow an attacker to obtain sensitive information.
March 10, 2019
Multiple vulnerabilities have been found in systemd, the worst of which may allow execution of arbitrary code.
March 10, 2019
Multiple vulnerabilities have been discovered in rdesktop, the worst of which could result in the remote execution of arbitrary code.
March 10, 2019
security update
March 10, 2019
A vulnerability in Tar could led to a Denial of Service condition.
March 10, 2019
Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which may allow execution of arbitrary code.
March 10, 2019
Multiple vulnerabilities have been found in cURL, the worst of which could result in a Denial of Service condition.
March 10, 2019
Multiple vulnerabilities have been discovered in openjpeg2, the open-source JPEG 2000 codec, that could be leveraged to cause a denial of service or possibly remote code execution.
March 10, 2019
Clement Lecigne discovered a use-after-free issue in chromium’s file reader implementation. A maliciously crafted file could be used to remotely execute arbitrary code because of this problem.
March 10, 2019
Input validation errors in Zsh could result in arbitrary code execution.
March 10, 2019
Multiple vulnerabilities have been found in Keepalived, the worst of which could allow an attacker to cause Denial of Service condition.
March 10, 2019
Several security vulnerabilities have been discovered in symfony, a PHP web application framework. Numerous symfony components are affected: Security, bundle readers, session handling, SecurityBundle,
March 10, 2019
Applicants data of 3 elite US colleges hacked for ransom
March 9, 2019
security update
March 9, 2019
An update that fixes one vulnerability is now available.
March 9, 2019
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: The EXIF extension had multiple cases of invalid memory access and rename() was implemented insecurely.
March 8, 2019
Security fix for CVE-2018-15587
March 8, 2019
An update that solves one vulnerability and has 5 fixes is now available.
March 8, 2019
An update that fixes two vulnerabilities is now available.
March 8, 2019
Citrix Falls Prey to Password-Spraying Attack
March 8, 2019
New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
March 8, 2019
An update that solves 5 vulnerabilities and has 6 fixes is now available.
March 8, 2019
RSA Conference 2019: Emotet Takes Aim at Latin America
March 8, 2019
Reading Time: ~2 min. Ransomware as-a-Service Offers Tiered Membership Benefits Jokeroo is the latest ransomware-as-a-service (RaaS) to begin spreading through hacker forums, though it’s differentiating itself by requiring a membership fee with various package offerings. For just $90, a buyer obtains access to a ransomware variant that they can fully customize in exchange for a […]
March 8, 2019
New backdoor malware hits Slack and Github platforms
March 8, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0230
March 8, 2019
Flaws in smart car alarms exposed 3 million cars to hijack
The vulnerabilities, which resided in associated smartphone apps, were both easy to find and easy to fix The post Flaws in smart car alarms exposed 3 million cars to hijack appeared first on WeLiveSecurity
March 8, 2019
RSAC 2019: The Dark Side of Machine Learning
March 8, 2019
An update that solves three vulnerabilities and has one errata is now available.
March 8, 2019
An update that fixes 9 vulnerabilities is now available.
March 8, 2019
An update that fixes 15 vulnerabilities is now available.
March 8, 2019
An update that solves two vulnerabilities and has one errata is now available.
March 8, 2019
An update that solves two vulnerabilities and has one errata is now available.
March 8, 2019
RSA Conference 2019 Recap
March 8, 2019
Download NSA’s reverse engineering tool GHIDRA
March 8, 2019
RSA conference, USA 2019: Keynotes and key words
A bright tomorrow of technical delight, or a dismal future of digital dysfunction? The post RSA conference, USA 2019: Keynotes and key words appeared first on WeLiveSecurity
March 8, 2019
RSA 2019: Protecting your privacy in a NIST and GDPR world
Protecting your privacy is no longer just an option but a legal requirement in many parts of the world The post RSA 2019: Protecting your privacy in a NIST and GDPR world appeared first on WeLiveSecurity
March 8, 2019
An update that fixes one vulnerability is now available.
March 8, 2019
An update that fixes one vulnerability is now available.
March 8, 2019
Risk Level: Very Low. Type: Trojan.
March 8, 2019
## drupal8 Upstream: – https://www.drupal.org/project/drupal/releases/8.6.10 – https://www.drupal.org/SA-CORE-2019-003 – https://www.drupal.org/project/drupal/releases/8.6.9 – https://www.drupal.org/project/drupal/releases/8.6.8 – https://www.drupal.org/project/drupal/releases/8.6.7 –
March 7, 2019
RSA Conference 2019: Ultrasound Hacked in Two Clicks
March 7, 2019
## drupal8 Upstream: – https://www.drupal.org/project/drupal/releases/8.6.10 – https://www.drupal.org/SA-CORE-2019-003 – https://www.drupal.org/project/drupal/releases/8.6.9 – https://www.drupal.org/project/drupal/releases/8.6.8 – https://www.drupal.org/project/drupal/releases/8.6.7 –
March 7, 2019
A flaw was found in Nagios Core version 4.4.1 and earlier. The qh_help function is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket (CVE-2018-13441).
March 7, 2019
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. […]
March 7, 2019
A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a […]
March 7, 2019
When symmetric encryption is used, data can be injected through the passphrase property of the gnupg.GPG.encrypt() and gnupg.GPG.decrypt() methods. The supplied passphrase is not validated for newlines, and the library passes –passphrase-fd=0 to the gpg executable, which expects the passphrase on the first line of stdin, and the ciphertext to be decrypted
March 7, 2019
NVIDIA graphics drivers could be made to expose sensitive information.
March 7, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
March 7, 2019