CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...

Oracle Hospitality OPERA 5 CVE-2020-2677 Remote Security Vulnerability

Description Oracle Hospitality OPERA 5 is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Login' component is affected. This vulnerability affects the following supported versions: 5.5, 5.6 Technologies Affected Oracle Hospitality OPERA ...

1.automatizuj.cz Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1065452 Security Researcher devl00p Helped patch 3018 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting 1.automatizuj.cz website...

Fedora Update for heimdal FEDORA-2019-f3046b6bfb

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: heimdal-7.7.0-2.fc30

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

[SECURITY] Fedora 31 Update: heimdal-7.7.0-2.fc31

Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec rfc1510 and successors including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center...

CVE-2019-7479

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n a...

Design/Logic Flaw

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n a...

CVE-2019-7479

CVE-2019-7479 affects SonicOS and SonicOSv: authenticated read-only administrators can elevate privileges to configuration mode. Affected versions include SonicOS Gen 5 up to 5.9.1.12-4o and earlier; Gen 6 up to versions such as 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1....

CVE-2019-7479

A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n a...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross site scripting (XSS) (CVE-2019-4470)

Summary IBM QRadar SIEM is vulnerable to cross site scripting XSS Vulnerability Details CVEID: CVE-2019-4470 DESCRIPTION: CVSS Base score: 5.4 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/163779 for the current score. CVSS Vector:...

[SECURITY] Fedora 30 Update: fribidi-1.0.5-5.fc30

A library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way; while the text data itself is always written in logical order...

CVE-2019-8585

CVE-2019-8585 concerns Apple CoreAudio: an out-of-bounds read was triggered while processing a maliciously crafted movie file, leading to potential arbitrary code execution. Root cause: insufficient input validation in CoreAudio handling; fixed by improved input validation. Affected/affected upda...

[SECURITY] Fedora 31 Update: fribidi-1.0.5-5.fc31

A library to handle bidirectional scripts for example Hebrew, Arabic, so that the display is done in the proper way; while the text data itself is always written in logical order...

EulerOS 2.0 SP3 : krb5 (EulerOS-SA-2019-2600)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an olde...

ASUS ZenFone 5 Selfie Access Control Error Vulnerability

The ASUS ZenFone 5 Selfie is a smartphone from Asus ASUS of Taiwan, China. An Access Control Error vulnerability exists in ASUS ZenFone 5 Selfie. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker can exploi...

Unspecified Vulnerability in Ulefone Armor 5

Ulefone Armor 5 is a smartphone from Chinese company Ulefone Technology Ulefone. An unspecified vulnerability exists in Ulefone Armor 5. An attacker can exploit the vulnerability to modify system properties...

EulerOS 2.0 SP2 : krb5 (EulerOS-SA-2019-2378)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an olde...

FreeBSD : phpmyadmin -- multiple vulnerabilities (ca3fe5b3-185e-11ea-9673-4c72b94353b5)

the phpmyadmin team reports : This security fix is part of an ongoing effort to improve the security of the Designer feature and is designated PMASA-2019-5. There is also an improvement for how we sanitize git version information shown on the home page. C Tenable Network Security, Inc. The...

EulerOS 2.0 SP5 : krb5 (EulerOS-SA-2019-2532)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an olde...