EulerOS 2.0 SP2 : grub2 (EulerOS-SA-2019-1735)

According to the version of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could...

EulerOS 2.0 SP2 : dump (EulerOS-SA-2019-1740)

According to the version of the dump package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could creat...

CVE-2014-10374

creationtimestamp| type| source ---|---|--- 2019-07-15 16:27:12+00:00| seen| https://t.me/cibsecurity/5517...

CVE-2014-10374

CVE-2014-10374 concerns Fitbit activity-tracker devices where BLE advertising uses a TxAdd flag for random addresses, but the addresses remain constant. This leads to “permanent trackability” and privacy concerns when a device is sniffed at multiple fixed locations, enabling an adversary to tell ...

CVE-2014-8160

creationtimestamp| type| source ---|---|--- 2019-07-15 06:18:23+00:00| seen| Telegram/h89cT673Dgj2j8J5w8AjFNvk4Puc3S4cDwWSG4KBqrQxyHI...

MyBB JN-Jones MyBB-2FA plugin cross-site request forgery vulnerability

MyBB MyBulletinBoard is the MyBB team developed a set of PHP and MySQL development of free and Web-based forum software. The software is easy to use , support for multiple languages , scalable and so on.JN-Jones MyBB-2FA plugin is used in which a two-factor authentication plugin . A cross-site...

Debian: Security Advisory (DLA-1853-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1853-1] libspring-java security update

Package : libspring-java Version : 3.0.6.RELEASE-17+deb8u1 CVE ID : CVE-2014-3578 CVE-2014-3625 CVE-2015-3192 CVE-2015-5211 CVE-2016-9878 Debian Bug : 760733 769698 796137 849167 Vulnerabilities have been identified in libspring-java, a modular Java/J2EE application framework. CVE-2014-3578 A...

CVE-2014-3798

creationtimestamp| type| source ---|---|--- 2019-07-12 00:35:51+00:00| seen| https://t.me/cibsecurity/5488...

CVE-2014-3798

The CVE concerns Citrix XenServer Windows Guest Tools (XenServer Tools) for Windows guests, with vulnerability in the xenvif-facing handling that allows a remote, unauthenticated attacker to crash the guest OS by sending specially crafted Ethernet frames. Affected versions include XenServer 6.2 S...

KB4505217 - Description of the security update for SQL Server 2014 SP2 GDR: July 9, 2019

KB4505217 - Description of the security update for SQL Server 2014 SP2 GDR: July 9, 2019 Summary A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execu...

KB4505419 - Description of the security update for SQL Server 2014 SP2 CU17: July 9, 2019

KB4505419 - Description of the security update for SQL Server 2014 SP2 CU17: July 9, 2019 Summary A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could...

EulerOS Virtualization for ARM 64 3.0.2.0 : util-linux (EulerOS-SA-2019-1694)

According to the version of the util-linux packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.CVE-2014-9114 Note that Tenable...

Security Bulletin: Multiple vulnerabilities exist in the current IBM SDK for Java used in IBM System Networking Switch Center (CVE-2014-0411 & CVE-2014-0460)

Summary IBM System Networking Switch Center ships with IBM Java 7 JRE. Two vulnerabilities are fixed in the April 2014 Critical Patch Update. 1 CVE-2014-0460: JNDI DNS service provider has several implementation flaws that make spoofing DNS responses much easier; 2 CVE-2014-0411: Vulnerability in...

DDoS Attacker Who Ruined Gamers' Christmas Gets 27 Months in Prison

A 23-year-old hacker from Utah who launched a series of DDoS attacks against multiple online services, websites, and online gaming companies between December 2013 and January 2014 has been sentenced to 27 months in prison. Austin Thompson, a.k.a. "DerpTroll," pledged guilty back in November 2018...

EulerOS 2.0 SP5 : util-linux (EulerOS-SA-2019-1670)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.CVE-2014-9114 Note that Tenable Network Security has extracted...

CVE-2014-9699

creationtimestamp| type| source ---|---|--- 2019-06-25 00:29:35+00:00| seen| https://t.me/cibsecurity/5100...

CVE-2014-9699

The CVE-2014-9699 entry concerns MakerBot Replicator 5G printers running Apache HTTP Server with directory indexing enabled. The underlying issue is directory listing exposure, which allows unauthenticated access to Apache logs, system logs, and design files via the HTTP server. The connected doc...

Packet Sanity (CVE-1999-0193; CVE-1999-0675; CVE-2000-0221; CVE-2002-1071; CVE-2003-1029; CVE-2004-0247; CVE-2004-1109; CVE-2007-1804; CVE-2007-3026; CVE-2008-7127; CVE-2010-1185; CVE-2011-0975; CVE-2012-6638; CVE-2014-3000)

...

CVE-2019-2014

CVE-2019-2014 is a local elevation-of-privilege vulnerability in Android’s rw_t3t_handle_get_sc_poll_rsp path (rw_t3t.cc), caused by a missing bounds check that can enable an out-of-bounds write. Affected products include Android 7.0–9, with exploitation requiring user interaction. The issue is c...