Mozilla Firefox Security Advisories (MFSA2019-12, MFSA2019-13) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SUSE-SU-2019:14058-1 Security update for gnutls

This update for gnutls fixes the following issues: Security issues fixed: - CVE-2018-10846: Improve mitigations against Lucky 13 class of attacks PRIME + PROBE bsc1105460. - CVE-2017-10790: Fixed a denial of service in the asn1checkidentifier function bsc1047002...

CVE-2012-6652

creationtimestamp| type| source ---|---|--- 2019-05-13 18:31:34+00:00| seen| https://t.me/cibsecurity/4271...

CVE-2018-12295

creationtimestamp| type| source ---|---|--- 2019-05-13 16:26:19+00:00| seen| https://t.me/cibsecurity/4268...

CVE-2018-12299

creationtimestamp| type| source ---|---|--- 2019-05-13 16:26:13+00:00| seen| https://t.me/cibsecurity/4264...

CVE-2018-12300

creationtimestamp| type| source ---|---|--- 2019-05-13 16:26:12+00:00| seen| https://t.me/cibsecurity/4263...

CVE-2018-12302

creationtimestamp| type| source ---|---|--- 2019-05-13 16:26:10+00:00| seen| https://t.me/cibsecurity/4261...

CVE-2018-12303

creationtimestamp| type| source ---|---|--- 2019-05-13 16:26:09+00:00| seen| https://t.me/cibsecurity/4260...

Rockwell Automation PointIO Chassis 13 Slot 1734 Chassis 13

Binary data 753574.prm...

Emerson 396352-13-8 Analog Input module Detection

Binary data 756549.prm...

Rockwell Automation ArmorPoint Chassis 13 Slot 1738 Chassis 13

Binary data 753654.prm...

Spring Cloud Config 2.1.x - Path Traversal Exploit

Exploit for java platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Spring Cloud Config Server Directory Traversal', 'Description' = %q This module exploits a...

ManageEngine Applications Manager 11.0 14.0 - SQL Injection Remote Code Execution (Metasploit)

ManageEngine Applications Manager 11.0 14.0 - SQL Injection Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ManageEngine Applications Manager 11.0 %q This module...

Recommended update for xen (important)

openSUSE Security Update: Recommended update for xen Announcement ID: openSUSE-SU-2019:1199-1 Rating: important References: 1026236 1027519 1114988 1126140 1126141 1126192 1126195 1126196 1126197 1126198 1126201 1126325 1127400 1127620 Cross-References: CVE-2018-19967 Affected Products: openSUSE...

Security update for MozillaThunderbird (critical)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:1126-1 Rating: critical References: 1129821 1130262 Cross-References: CVE-2018-18506 CVE-2019-5785 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795...

openSUSE Security Update : gnutls (openSUSE-2019-746)

This update for gnutls fixes the following security issues : - Improved mitigations against Lucky 13 class of attacks - CVE-2018-10846: 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery bsc1105460 - CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirtee...

AZL-37151 CVE-2019-3816 affecting package openwsman for versions less than 2.6.8-13

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman serve...

CVE-2018-17937

creationtimestamp| type| source ---|---|--- 2019-03-13 19:19:47+00:00| seen| https://t.me/cibsecurity/3089...

Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-13) - Mac OS X

Adobe Acrobat Reader DC Continuous Track is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Adobe Acrobat and Reader Security bypass (APSB19-13: CVE-2019-7815)

A security bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...