Type: Vulnerability. Google Android is prone to a local privilege-escalation vulnerability.
October 7, 2019
Type: Vulnerability. Apache MINA is prone to an information-disclosure vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a cross-site scripting vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Firepower Threat Defense Software is prone to a local command-injection vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Firepower Management Center Software is prone to a remote security-bypass vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Apache Hadoop is prone to a memory-corruption vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Android-gif-drawable is prone to a remote code execution vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Email Security Appliance is prone to a remote security-bypass vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco IC3000 Industrial Compute Gateway is prone to a denial-of-service vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to an SQL-injection vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Identity Services Engine is prone to a cross-site scripting vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to a security-bypass vulnerability; fixes are available.
October 7, 2019
Type: Vulnerability. Cisco Security Manager is prone to a command-execution vulnerability; fixes are available.
October 7, 2019
Alabama Hospitals Pay Up in Ransomware Attack
October 7, 2019
An update that fixes two vulnerabilities is now available.
October 7, 2019
An update that fixes two vulnerabilities is now available.
October 7, 2019
All You Need To Know For External Hard Drive Recovery
October 7, 2019
An update is now available for Red Hat JBoss Enterprise Application Platform 7.2 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 7, 2019
A security update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
October 7, 2019
In lib/mini_magick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a ‘|’ character
October 7, 2019
Iran-linked Hackers Target Trump 2020 Campaign, Microsoft says
October 7, 2019
Several security issues were fixed in OpenEXR.
October 7, 2019
CVE-2019-16993 In phpBB, includes/acp/acp_bbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An
October 7, 2019
An update that solves two vulnerabilities and has one errata is now available.
October 6, 2019
Can ordinary companies keep up with data compliance regulations?
October 6, 2019
– Update to 2.16.3 – Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-2.7.12-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2019-10
October 6, 2019
– Update to 2.16.3 – Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-2.7.12-released Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security- advisory-2019-10
October 6, 2019
This is an update fixing CVE-2019-16928.
October 6, 2019
Update to 1.7.5 —- Fixes CVE-2019-12816
October 6, 2019
security update
October 6, 2019
security update
October 5, 2019
1.6.7 Fix potential crash when reloading config. Client library: * Don’t use / in autogenerated client ids, to avoid confusing with topics. * Fix mosquitto_max_inflight_messages_set() and mosquitto_int_option(…, MOSQ_OPT_*_MAX, …) behaviour. * Fix regression on use of
October 5, 2019
Max Kellermann reported a NULL pointer dereference flaw in libapreq2, a generic Apache request library, allowing a remote attacker to cause a denial of service against an application using the library (application crash) if an invalid nested “multipart” body is processed.
October 5, 2019
1.6.7 Fix potential crash when reloading config. Client library: * Don’t use / in autogenerated client ids, to avoid confusing with topics. * Fix mosquitto_max_inflight_messages_set() and mosquitto_int_option(…, MOSQ_OPT_*_MAX, …) behaviour. * Fix regression on use of
October 5, 2019
1.6.7 Fix potential crash when reloading config. Client library: * Don’t use / in autogenerated client ids, to avoid confusing with topics. * Fix mosquitto_max_inflight_messages_set() and mosquitto_int_option(…, MOSQ_OPT_*_MAX, …) behaviour. * Fix regression on use of
October 5, 2019
An XSS vulnerability was discovered in noVNC in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.
October 5, 2019
An update that fixes 29 vulnerabilities is now available.
October 5, 2019
Type: Vulnerability. Linux Kernel is prone to multiple local privilege-escalation vulnerabilities; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Unified Contact Center Express is prone to an HTTP response-splitting vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Adaptive Security Appliance is prone to a remote denial-of-service vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Multiple Cisco Products are prone to a denial-of-service vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Moxa EDR 810 Series is prone to multiple security vulnerabilities; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability; fixes are available.
October 4, 2019
Type: Vulnerability. Cisco Prime Infrastructure is prone to a cross-site scripting vulnerability; fixes are available.
October 4, 2019
The package ruby2.5 before version 2.5.7-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, cross-site scripting, denial of service and insufficient validation.
October 4, 2019
The package ruby-rdoc before version 6.1.2-1 is vulnerable to cross- site scripting.
October 4, 2019
New malware mimics Windows scanner to infect PCs with ransomware
October 4, 2019
Google Warns of Android Zero-Day Bug Under Active Attack
October 4, 2019
Buying a new laptop? Here’s how to secure it
October 4, 2019
An update that fixes 27 vulnerabilities is now available.
October 4, 2019
An update that fixes two vulnerabilities is now available.
October 4, 2019
An update that fixes 27 vulnerabilities is now available.
October 4, 2019
An update that fixes three vulnerabilities is now available.
October 4, 2019
An update that solves two vulnerabilities and has one errata is now available.
October 4, 2019
An update that solves one vulnerability and has two fixes is now available.
October 4, 2019
WhatsApp vulnerability could compromise Android smartphones
October 4, 2019
Reading Time: ~ 2 min. DoorDash Data Breach Nearly five months after a breach, DoorDash has just now discovered that unauthorized access to sensitive customer information has taken place. Among the stolen data were customer names, payment history, and contact info, as well as the last four digits of both customer payment cards and employee […]
October 4, 2019
Several security issues were fixed in the Linux kernel.
October 4, 2019
£3 billion Safari iPhone privacy lawsuit given go-ahead
October 4, 2019
Implementing corporate laptop encryption using LUKS
October 4, 2019
AG Barr, Officials to Facebook: Don’t Encrypt Messaging
October 4, 2019
Hacker’s parents sentenced for selling his cryptocurrency
October 4, 2019
Google brings Incognito mode to Maps
October 4, 2019
Virus Bulletin 2019: Magecart Infestations Saturate the Web
October 4, 2019
Kaspersky warns of encryption-busting Reductor malware
October 3, 2019
New Reductor Malware Hijacks HTTPS Traffic
October 3, 2019
A vulnerability was discovered by Lukas Kupczyk of the Advanced Research Team at CrowdStrike Intelligence in OpenConnect, an open client for Cisco AnyConnect, Pulse, GlobalProtect VPN. A malicious HTTP server
October 3, 2019
An update that fixes one vulnerability is now available.
October 3, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple remote code-execution vulnerabilities; fixes are available.
October 3, 2019
Type: Vulnerability. Cisco FXOS and Firepower Threat Defense Software are prone to multiple local command-injection vulnerabilities; fixes are available.
October 3, 2019
Type: Vulnerability. Cisco Firepower Threat Defense Software is prone to multiple security-bypass vulnerabilities; fixes are available.
October 3, 2019
Type: Vulnerability. Multiple Cisco Unified Communications Products are prone to a cross-site request-forgery vulnerability.
October 3, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to a remote code-execution vulnerability; fixes are available.
October 3, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to multiple SQL-injection vulnerabilities; fixes are available.
October 3, 2019
Type: Vulnerability. Cisco Firepower Management Center is prone to a command-injection vulnerability; fixes are available
October 3, 2019
Type: Vulnerability. Palo Alto Networks Zingbox Inspector is prone to an information-disclosure vulnerability; fixes are available.
October 3, 2019