5955 matches found
CVE-2015-9288
creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:14+00:00| seen| https://t.me/cibsecurity/5776...
Schneider Electric Interactive Graphical SCADA System
1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor: Schneider Electric Equipment: Interactive Graphical SCADA System IGSS Vulnerability: Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve arbitrary code execution or crash the software. 3...
CVE-2019-6626
On BIG-IP AFM, Analytics, ASM 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the Configuration utility...
Is Your VPN Provider in a 14 Eyes Country? (What is 14 Eyes?)
By Owais Sultan The reason people have Virtual private networks VPNs is that they protect our online privacy, however, privacy is essentially non-existent if you live in a place where the government is allowed to track your online activities. This is why you need to get a good VPN, the goal is to...
Threat Roundup for June 14 to June 21
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 14 and June 21. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
End of support for Office 2010
End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...
Security Bulletin: IBM API Connect is affected by sensitive information leakage in LoopBack (CVE-2019-4382)
Summary API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4382 DESCRIPTION: IBM API Connect could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. CVSS Base Score: 5.3 CVSS Temporal...
CVE-2019-1904
creationtimestamp| type| source ---|---|--- 2019-06-14 08:06:24+00:00| seen| https://t.me/SecLabNews/5130...
USN-4008-3 linux-lts-xenial, linux-aws vulnerabilities
USN-4008-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Robert Święcki discovered that the Linux kernel did not properly apply Address Space...
CVE-2019-12313
creationtimestamp| type| source ---|---|--- 2019-05-24 14:48:22+00:00| seen| https://t.me/cvemitreorg/283...
CVE-2017-11557
creationtimestamp| type| source ---|---|--- 2019-05-23 18:48:19+00:00| seen| https://t.me/cvemitreorg/233 2019-05-23 23:14:14+00:00| seen| https://t.me/cibsecurity/4501...
Mozilla Firefox ESR Security Advisories (MFSA2019-09, MFSA2019-14) - Windows
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Mozilla Firefox ESR Security Advisories (MFSA2019-09, MFSA2019-14) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
Google Has Stored Some Passwords in Plaintext Since 2005
On the heels of embarrassing disclosures from Facebook and Twitter, Google reveals its own password bugs—one of which lasted 14 years...
Axessh 4.2 - Log file name Denial of Service (PoC)
Axessh 4.2 - Log file name Denial of Service PoC Exploit Title: Axessh 4.2 'Log file name' - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-05-14 Vendor Homepage: http://www.labf.com Software Link: http://www.labf.com/download/axessh.exe Tested Version: 4.2 Tested on:...
Security fix for the ALT Linux 8 package postgresql11 version 11.3-alt0.M80P.1
11.3-alt0.M80P.1 built May 14, 2019 Alexei Takaseev in task 229145 May 9, 2019 Alexei Takaseev - 11.3 - Fixes CVE-2019-10129, CVE-2019-10130...
Rockwell Automation Stratix 8300 14-Port managed switch 1783-RMS06T plus 8-Port Expansion Module Communications Adapter
Binary data 752997.prm...
Rockwell Automation Stratix 8000 14-Port managed switch 1783-MS06T plus two 4-Port Expansion Modules Communications Adapter
Binary data 753031.prm...