CVE-2023-5879

CVE-2023-5879: In Genie Aladdin Connect Android app (versions 5.65 Build 2075 and earlier), authentication data was stored in clear text in the app’s local storage, enabling recovery of credentials if the device is compromised. Root cause: insecure storage of sensitive data within the Android app...

CVE-2023-5879 Aladdin Connect Android Application Insecure Storage

Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Application Version 5.65 Build 2075 and below on Android Devices. This allows the attacker, with access to the android device, to potentially retrieve users' clear text authentication...

Genie Aladdin Connect Retrofit Garage Door Opener: Multiple Vulnerabilities

Rapid7, Inc. Rapid7 discovered vulnerabilities in Aladdin Connect retrofit kit garage door opener and Android mobile application produced by Genie. The affected products are: Aladdin Garage door smart retrofit kit, Model ALDCM Android Mobile application ALADDIN Connect, Version 5.65 Build 2075...

K88474783: BIG-IP DoS profile vulnerability CVE-2020-5879

Security Advisory Description Under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied. CVE-2020-5879 Impact The affected system sends some requests to the back-end server without encryption, possibly leaki...

Ubuntu 22.04 LTS : Linux kernel (HWE) vulnerabilities (USN-5879-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5879-1 advisory. Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5879)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5879 advisory. - USB: serial: omninet: fix reference leaks at open Mark Nicholson Orabug: 30484762 CVE-2017-8925 - GFS2: don't set rgrp globject until it's insert...

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

CVE-2020-5879

CVE-2020-5879 affects BIG-IP ASM 11.6.1–11.6.5.1, where under certain configurations the appliance sends data plane traffic to back-end servers unencrypted despite a Server SSL profile being applied. The issue is documented in F5 advisory K88474783, which notes that vulnerable releases include 11...

F5 Networks BIG-IP : BIG-IP DoS profile vulnerability (K88474783)

Under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied. CVE-2020-5879 Impact The affected system sends some requests to the back-end server without encryption, possibly leaking sensitive data. Therequests...

Weekly Tip from Experts: Clarification on the security Bulletin for DB2 Accessories Suite CVE-2013-5879

Abstract Weekly Tip from Experts: Clarification on the security Bulletin for DB2 Accessories Suite CVE-2013-5879 Body Hello DB2 DBAs Hope you are having a nice time during this holiday season! I recently helped a diligent DBA who was concerned about this security bulletin and ended up providing...

openSUSE: Security Advisory for chromium (openSUSE-SU-2019:2152-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

UBUNTU-CVE-2019-5879

Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension...

CVE-2019-5879

CVE-2019-5879 : In Google Chrome, before 77.0.3865.75, insufficient policy enforcement in extensions allowed a user-tricked installation of a malicious extension to read local files. The issue arises from vulnerable extension permissions; impact is local data exposure. Affected product: Google Ch...

Debian: Security Advisory (DSA-4562-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 31 : chromium (2019-9a5e81214f)

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

openSUSE Security Update : chromium (openSUSE-2019-2153)

This update for chromium fixes the following issues : Security issues fixed : - CVE-2019-5870: Fixed a use-after-free in media. boo1150425 - CVE-2019-5871: Fixed a heap overflow in Skia. boo1150425 - CVE-2019-5872: Fixed a use-after-free in Mojo boo1150425 - CVE-2019-5874: Fixed a behavior that...

Google Chrome Security Updates (stable-channel-update-for-desktop-2019-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2018-5879

CVE-2018-5879 affects Snapdragon mobile and Snapdragon Wear platforms (list includes MDM9206, MDM9607, SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SDA660, SDM630, SDM660). Root cause is an improper length check while processing an MQTT message, which can lead to a heap overflow. The i...