Type: Vulnerability. SAP Portfolio and Project Management is prone to an information-disclosure vulnerability; fixes are available.
December 10, 2019
Type: Vulnerability. SAP Enable Now is prone to multiple unspecified security vulnerabilities; fixes are available.
December 10, 2019
Type: Vulnerability. SAP BusinessObjects Business Intelligence Platform is prone to an unspecified cross-site request-forgery vulnerability; fixes are available.
December 10, 2019
Birth Certificate Data Laid Bare on the Web in Multiple States
December 9, 2019
Serious Security: Understanding how computers count
December 9, 2019
Romanian Duo Receives Jailtime For Infecting 400,000 With Malware
December 9, 2019
Type: Vulnerability. Palo Alto Networks PAN-OS is prone to a privilege-escalation vulnerability; fixes are available.
December 9, 2019
Type: Vulnerability. Linux Kernel is prone to a remote denial-of-service vulnerability; fixes are available.
December 9, 2019
Type: Vulnerability. Dell Command Configure is prone to an arbitrary file-overwrite vulnerability; fixes are available.
December 9, 2019
Type: Vulnerability. Adobe Stock is prone to remote code-execution vulnerability.
December 9, 2019
Type: Vulnerability. Multiple QNAP products are prone to multiple security vulnerabilities; fixes are available.
December 9, 2019
Type: Vulnerability. Multiple QNAP products are prone to multiple security vulnerabilities; fixes are available.
December 9, 2019
Type: Vulnerability. OpenSLP is prone to a heap-memory-corruption vulnerability; fixes are available.
December 9, 2019
Type: Vulnerability. Docker is prone to an arbitrary code-execution vulnerability; fixes are available.
December 9, 2019
Type: Vulnerability. Facebook Mcrouter is prone to multiple denial of service vulnerabilities; fixes are available.
December 9, 2019
Type: Vulnerability. Atlassian Companion is prone to a security-bypass vulnerability.
December 9, 2019
FBI uses PlayStation to bust large scale drug deal
December 9, 2019
Elder Scrolls Online Targeted by Cybercrooks Hunting In-Game Loot
December 9, 2019
Will the new iPhone 11 track you even if you tell it not to?
December 9, 2019
Fake VPN website delivering password-stealing malware
December 9, 2019
Hackers steal credit card details from Sweaty Betty customers
December 9, 2019
GE, Dunkin’, Forever 21 Caught Up in Broad Internal Document Leak
December 9, 2019
An update that solves one vulnerability and has one errata is now available.
December 9, 2019
An update that solves one vulnerability and has one errata is now available.
December 9, 2019
Networking attack gives hijackers VPN access
December 9, 2019
HackerOne pays $20,000 bounty after breach of own systems
December 9, 2019
Facebook suing ILikeAd for hijacking users’ ad accounts
December 9, 2019
$5m bounty set on the alleged head of Evil Corp banking Trojan group
December 9, 2019
5 scam prevention tips for seniors
How can people who didn’t grow up with technology protect themselves against some of the most common types of online fraud? The post 5 scam prevention tips for seniors appeared first on WeLiveSecurity
December 9, 2019
A security update is now available for Open Liberty 19.0.0.12 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 9, 2019
NSS could be made to crash if it received a specially crafted certificate.
December 9, 2019
An update for nss is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
December 9, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
December 9, 2019
security update
December 8, 2019
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code.
December 8, 2019
The OpenSLP package had two open security issues: CVE-2017-17833
December 8, 2019
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/display_git_revision.lib.php and libraries/Footer.class.php.
December 8, 2019
This update addresses a number of bugs affecting processing of CRLs in mod_tls, including possible null pointer dereferences and missing some checks. Thanks to Lionel Debroux for reporting them.
December 7, 2019
This update addresses a number of bugs affecting processing of CRLs in mod_tls, including possible null pointer dereferences and missing some checks. Thanks to Lionel Debroux for reporting them.
December 7, 2019
Address CVE-2019-19204 CVE-2019-19203 CVE-2019-19012. Fixes are backported.
December 7, 2019
Amazon battles leaky S3 buckets with a new security tool
December 7, 2019
New privacy tool exposes which website leaves your data unprotected
December 6, 2019
Email Voted a Weak Link for Election Security, with DMARC Lagging
December 6, 2019
Feds Crack Down on Money Mules, Warn of BEC Scams
December 6, 2019
Type: Vulnerability. Multiple Linux Distributions are prone to a security-bypass vulnerability.
December 6, 2019
Type: Vulnerability. Xen is prone to a local privilege-escalation vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. CZ.NIC Knot Resolver is prone to a denial-of-service vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. OpenBSD is prone to multiple privilege-escalation and authentication-bypass vulnerabilities; fixes are available.
December 6, 2019
Type: Vulnerability. Redhat KeyCloak is prone to an authentication-bypass vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. Apache Olingo is prone to multiple security vulnerabilities; fixes are available.
December 6, 2019
Type: Vulnerability. An AMD ATI driver is prone to denial-of-service vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. Wireshark is prone to a remote denial-of-service vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. Embedthis GoAhead is prone to a denial-of-service vulnerability; fixes are available.
December 6, 2019
Type: Vulnerability. Embedthis GoAhead Web Server is prone to a remote code execution vulnerability; fixes are available.
December 6, 2019
New Linux vulnerability puts VPN connections at risk of hijacking
December 6, 2019
Linux Bug Opens Most VPNs to Hijacking
December 6, 2019
Facebook Alleges Company Infiltrated Thousands for Ad Fraud
December 6, 2019
Stealthy MacOS Malware Tied to Lazarus APT
December 6, 2019
Mac users targetted by Lazarus ‘fileless’ Trojan
December 6, 2019
Reading Time: ~ 2 min. ZeroCleare Malware Wiping Systems IBM researchers have been tracking the steady rise in ZeroCleare deployments throughout the last year, culminating in a significant rise in 2019. This malware is deployed on both 32 and 64-bit systems in highly targeted attacks, with the capability to completely wipe the system by exploiting […]
December 6, 2019
US parents file class action against TikTok over children’s privacy
December 6, 2019
OpenBSD devs patch authentication bypass bug
December 6, 2019
5 things you should never do when using anonymous operating systems
December 6, 2019
The updated packages fix a security vulnerability: ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. (CVE-2019-16709)
December 6, 2019
Updated sysstat package fixes security vulnerability: Memory corruption due to an integer overflow (CVE-2019-16167). References:
December 6, 2019
Updated python-psutil packages fix security vulnerability: Riccardo Schirone discovered that psutil incorrectly handled certain reference counting operations. An attacker could use this issue to cause psutil to crash, resulting in a denial of service, or possibly execute
December 6, 2019
Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly
December 6, 2019
Updated libvncserver packages fix security vulnerability: LibVNC contained a memory leak in VNC server code, which allowed an attacker to read stack memory and could be abused for information disclosure. Combined with another vulnerability, it could be used to
December 6, 2019
Updated tnef package fixes security vulnerability: In tnef, an attacker may be able to write to the victim’s .ssh/authorized_keys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based
December 6, 2019
Ransomware Attack Hits Data Center Provider CyrusOne: Report
December 5, 2019
Type: Vulnerability. Redhat KeyCloak is prone to an authentication-bypass vulnerability; fixes are available.
December 5, 2019
Type: Vulnerability. Microsoft Windows is prone to a denial-of-service vulnerability.
December 5, 2019
Type: Vulnerability. VMware Harbor Container Registry for PCF is prone to multiple security vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to multiple denial-of-service vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to multiple denial-of-service vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to multiple local denial-of-service vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability; fixes are available.
December 5, 2019
Type: Vulnerability. Moxa AWK-3121 Series is prone to multiple security vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to multiple local denial-of-service vulnerabilities; fixes are available.
December 5, 2019
Type: Vulnerability. Dell Command Update is prone to multiple arbitrary-file-deletion vulnerabilities; a fix is available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability; fixes are available.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 5, 2019
Type: Vulnerability. Linux Kernel is prone to a local denial-of-service vulnerability.
December 5, 2019
Type: Vulnerability. Reliable Controls LicenseManager is prone to a local code execution vulnerability; fixes are available.
December 5, 2019
Type: Vulnerability. Dell EMC RSA Authentication Manager is prone to an HTML-injection vulnerability; fixes are available.
December 5, 2019