PT-2019-2849

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2847

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to insufficient access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2848

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.32 Oracle VM VirtualBox versions prior to 6.0.10 Description The issue is related to inadequate access control in the Core component of Oracle VM VirtualBox, allowing a low-privileged attacker with...

PT-2019-2840

Name of the Vulnerable Software and Affected Versions Oracle Clusterware version 12.1.0.2.0 Description The issue is related to insufficient access control in the Trace File Analyzer TFA Collector component of Oracle Clusterware, allowing an unauthenticated attacker with network access via multip...

PT-2019-4920 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Server: Security: Privileges subcomponent. This...

PT-2019-3415

Name of the Vulnerable Software and Affected Versions Java SE versions 7u221, 8u212, 11.0.3, 12.0.1 Java SE Embedded version 8u211 Description The issue is related to insufficient checks in the Java SE and Java SE Embedded components, specifically in the Utilities subcomponent. This allows an...

Denial of service

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available...

CVE-2019-5528: Undefined Security Weakness

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available...

DEBIAN-CVE-2019-10639

The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols e.g....

Security update for gnome-shell (moderate)

openSUSE Security Update: Security update for gnome-shell Announcement ID: openSUSE-SU-2019:1582-1 Rating: moderate References: 1124493 Cross-References: CVE-2019-3820 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Th...

Code injection

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2018-13907

The CVE-2018-13907 entry describes a vulnerability in Qualcomm/Snapdragon components where deserializing a key blob during key operations can trigger a buffer overflow, potentially exposing partial key information across a wide range of Snapdragon devices (IPQ4019, IPQ8074, MDM9... and many SD/So...

CVE-2018-13909

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

SUSE SLED15 / SLES15 Security Update : gnome-shell (SUSE-SU-2019:1459-1)

This update for gnome-shell fixes the following issues : Security issue fixed : CVE-2019-3820: Fixed a partial lock screen bypass bsc1124493. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-25499)

Intel Core X-series Processors are products of Intel Corporation.Intel Core X-series Processors are X-series central processing units CPUs.4th Generation Intel Core i5 Processors are 4th generation Core i5-series central processing units CPUs.4th Generation Intel Core i3 Processors are 4th...

JDK: unspecified vulnerability fixed in 8u201 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to an unknown functionality of the component JSSE. An unauthenticated attacker with network access via SSL/TLS could compromise Java SE...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service attacks. A remote, unauthenticated attacker could exploit the flawed Serialization component to partially access data and cause partial denial of service conditions...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded,...