PT-2018-11152

Name of the Vulnerable Software and Affected Versions TIBCO ActiveSpaces - Community Edition versions 3.3.0 through 3.5.0 TIBCO ActiveSpaces - Developer Edition versions 3.0.0 through 3.5.0 TIBCO ActiveSpaces - Enterprise Edition versions 3.0.0 through 3.5.0 Description The administrative daemon ...

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

PT-2018-14741

Name of the Vulnerable Software and Affected Versions Suricata versions 4.0.0 through 4.0.5 Description The issue allows remote attackers to cause a denial of service, resulting in a segfault and daemon crash, via crafted input to the SMTP parser. This has been exploited in the wild...

CVE-2018-18956: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

[SECURITY] Fedora 28 Update: systemd-238-10.git438ac26.fc28

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

F5 Networks BIG-IP : BIG-IP ASM data processing vulnerability (K38243073)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3 / 12.1.3.2 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K38243073 advisory. - On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may...

Yi Technology Home Camera 27US notice_to denial-of-service vulnerability

Summary An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability...

TIBCO Security Advisory: November 6, 2018 - TIBCOActiveSpaces

TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: CVE-2018-12411 Source: TIBCOSoftware Inc. TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: Source: TIB...

TIBCO Security Advisory: November 6, 2018 - TIBCOActiveSpaces

TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: CVE-2018-12411 Source: TIBCOSoftware Inc. TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: Source: TIB...

sssd: information leak from the sssd-sudo responder

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD utilizes too broad of a set of permissions. Any user who can send a message using the same raw protocol that sudo and SSSD use can read the sudo rules available for any user...

CVE-2018-18387

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

CVE-2018-18387

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

Privilege escalation

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

CVE-2018-18387

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

CVE-2018-18387

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

systemd - reexec State Injection

systemd - reexec State Injection / I am sending this bug report to Ubuntu, even though it's an upstream bug, as requested at https://github.com/systemd/systemd/blob/master/docs/CONTRIBUTING.mdsecurity-vulnerability-reports . When systemd re-executes e.g. during a package upgrade, state is...

CVE-2018-18387: Inclusion of Functionality from Untrusted Control Sphere

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse...

PT-2018-14430

Name of the Vulnerable Software and Affected Versions playSMS versions prior to 1.4.3 Description The issue allows for privilege escalation through daemon abuse. Recommendations For playSMS versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue...

[SECURITY] Fedora 28 Update: lldpad-1.0.1-10.git036e314.fc28

This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...

Juniper Device Manager Unauthorized Access Vulnerability

Juniper NFX Series is an NFX Series network security appliance from Juniper Networks, Inc. Juniper Device Manager JDM is one of the device management components; host OS is one of the host operating systems. A security vulnerability exists in Juniper Device Manager JDM and host OS on Juniper NFX...