Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

GHSA-7PH8-F946-Q5R7 High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592...

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592...

CVE-2019-0592

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611...

CVE-2019-0592

CVE-2019-0592 is a ChakraCore/Edge memory-corruption remote code execution issue. Connected sources corroborate a Chakra memory-management flaw that can lead to RCE in Microsoft Edge when handling in-memory objects. No exploit specifics are provided in the documents. Remediation details are not e...

Microsoft Patch Tuesday — March 2019: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 64 vulnerabilities, 17 of which are rated “critical,” 45 that are considered “important” and one “moderate” and “low” vulnerability each. This...

Microsoft Edge Chakra Scripting Engine Memory Corruption (CVE-2019-0592)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-0592

IBM iNotes contains a Cross-Site Scripting (XSS) vulnerability in versions before 8.5.3 Fix Pack 6 and 9.x before 9.0.1. The flaw allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Affected component is the iNotes web interface; root cause details are not provided...

CVE-2018-0592

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0592

CVE-2018-0592 affects Microsoft OneDrive with an untrusted search path/DLL planting issue. The vulnerability arises when a Trojan horse DLL placed in the application’s directory can execute with the user’s privileges, enabling arbitrary code execution if exploited locally. Affected context is the...

CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

CVE-2017-0592

CVE-2017-0592 describes a remote code execution vulnerability in Mediaserver’s FLACExtractor.cpp (libstagefright) on Android. The issue allows memory corruption when processing specially crafted media files, potentially enabling code execution within the Mediaserver process. Affected Android vers...

CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

[SECURITY] [DSA 3454-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3454-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2016 https://www.debian.org/security/faq -...

Mageia: Security Advisory (MGASA-2016-0035)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-0592

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core...

CVE-2016-0592

CVE-2016-0592 concerns Oracle VM VirtualBox. The vulnerability affects Oracle VM VirtualBox components in VirtualBox builds older than 4.3.36 and older than 5.0.14, with the Core subsystem being implicated. The documented impact is an ability for local users to affect availability via unknown vec...

Oracle VM VirtualBox < 4.3.36 / 5.0.14 Multiple Vulnerabilities (January 2016 CPU)

The Oracle VM VirtualBox application installed on the remote host is a version prior to 4.3.36 or 5.0.14. It is, therefore, affected by the following vulnerabilities : - An unspecified vulnerability exists in the Core subcomponent that allows a remote attacker to affect the availability of the...

CVE-2015-0592

The Zone-Based Firewall implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672...