Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

Security Bulletin: Multiple vulnerabilities in EBICS client in IBM Sterling B2B Integrator (CVE-2017-1132, CVE-2017-1347, CVE-2017-1348)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-1132 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable ...

CVE-2019-1347

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346...

Denial of service

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347...

Denial of service

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347...

CVE-2019-1347

Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.

CVE-2019-1347

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346...

CVE-2019-1347

creationtimestamp| type| source ---|---|--- 2019-10-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47489 2019-11-17 10:47:53+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6146...

Microsoft Windows CVE-2019-1347 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

RHEL 7 : kernel (RHSA-2018:1347)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1347 advisory. - Kernel: KVM: error in exception handling leads to wrong debug stack value CVE-2018-1087 - Kernel: error in exception handling leads to DoS...

Debian: Security Advisory (DLA-1347-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1347

NetIQ iManager admin web interface (versions prior to 3.1) is affected by a reflected cross-site scripting (XSS) vulnerability. The issue arises in the administrative web interface and reflects attacker-supplied input in the response, enabling potential script execution. The provided data cites C...

CVE-2017-1347

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126462...

CVE-2016-1347

The CVE-2016-1347 issue affects Cisco IOS with WAAS Express (versions 15.1–15.5). It stems from improper validation of TCP segments in the WAAS Express feature, allowing an unauthenticated remote attacker to force a device reload via a crafted TCP segment, causing a denial of service. Exploitatio...

Oracle: Security Advisory (ELSA-2015-1347)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1347

CVE-2015-1347 affects the osTicket project: a cross-site scripting (XSS) vulnerability in the file client.inc.php in versions before 1.9.5.1, exploitable via the lang parameter. The available connected documents confirm the issue and reference the fix in v1.9.5.1. Impact is remote script/HTML inj...

Infinity Exploit Kit Landing Page (CVE-2013-1347; CVE-2013-2423; CVE-2013-2465; CVE-2014-0322; CVE-2014-0502; CVE-2014-1776)

Infinity is a web exploit kit that operates by delivering a malicious payload to the victim's computer. Remote attackers can infect users with Infinity exploit kit by enticing them to visit a malicious web page. Infinity Exploit Kit installs payloads on infected computer, which could result in da...

iTunes < 11.2.1 User Directory Insecure Permissions Vulnerability (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 11.2.1. It is, therefore, affected by an insecure permissions vulnerability. An insecure permissions vulnerability exists where the '/Users' and '/Users/Shared' directories have world-writable permissions. This could allow ...

CVE-2014-1347

CVE-2014-1347 refers to an issue in Apple iTunes before 11.2.1 on macOS where, during reboot, the permissions of /Users and /Users/Shared are set to world-writable. This allows a local attacker to modify files and potentially access arbitrary user accounts via standard filesystem operations, cons...

IE 8 0Day in Sunshop Targeted Espionage Malware Campaign

Lady Boyle seems to have an admirer. Malware named after a character in the Dishonored video game continues to pop up in targeted attacks against a number of high profile military and socially motivated websites. The latest surfaced about 10 days ago in an attack researchers at FireEye are callin...