Xiaomi Redmi Note 5 Pro Xiaomi Stock Browser Information Disclosure Vulnerability

Xiaomi Redmi Note 5 Pro is a smartphone from Chinese company Xiaomi Technology Xiaomi.Xiaomi Stock Browser is one of the stock browsers. An information disclosure vulnerability exists in version 10.2.4.g of the Xiaomi Stock Browser in the Xiaomi Redmi Note 5 Pro. The vulnerability stems from an...

MetaTrader 4 vs MetaTrader 5 iPhone app

By Owais Sultan If you are an online trading enthusiast, you can use MetaTrader 5 and MetaTrader 4 iPhone apps to trade forex. Though the prime objective of MetaTrader 4 iPhone app and MetaTrader 5 iPhone app is to enable users to have great trading experience, these forex trading apps vary in...

Command injection

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command...

CVE-2018-19860

CVE-2018-19860 affects Broadcom Bluetooth firmware (Nexus 5 BCM4335C0; Raspberry Pi 3 BCM43438A1; other Broadcom-based devices) prior to summer 2014. The issue is an improper restriction of LMP commands, allowing an LMP command to cause execution of memory contents, effectively enabling memory co...

CVE-2018-19860

Broadcom firmware before summer 2014 on Nexus 5 BCM4335C0 2012-12-11, Raspberry Pi 3 BCM43438A1 2014-06-02, and unspecifed other devices does not properly restrict LMP commnds and executes certain memory contents upon receiving an LMP command, as demonstrated by executing an HCI command...

Cross site scripting

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

CVE-2019-11982

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

CVE-2019-11983

A remote buffer overflow vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

CVE-2019-11983

CVE-2019-11983 describes a remote buffer overflow in HPE Integrated Lights-Out: iLO 4 on Gen9 before v2.61b and iLO 5 on Gen10 before v1.39. Multiple connected sources corroborate a memory boundary issue in the network stack that can lead to overflow and potential impact on the device. The affect...

CVE-2019-11982

A remote cross site scripting vulnerability was identified in HPE Integrated Lights-Out 4 iLO 4 earlier than v2.61b for Gen9 servers and Integrated Lights-Out 5 iLO 5 for Gen10 Servers earlier than version v1.39...

CVE-2019-11982

HPE Integrated Lights-Out (iLO) products are affected by CVE-2019-11982: an XSS in the web page generation due to improper input handling. A remote attacker can exploit this on iLO 4 Gen9 before v2.61b and iLO 5 Gen10 before v1.39. The underlying root cause is improper neutralization/validation o...

Debian DSA-4455-1 : heimdal - security update

Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. - CVE-2018-16860 Isaac Boukris and Andrew Bartlett discovered that Heimdal was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. Detai...

Debian: Security Advisory (DSA-4455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ivanti LANDESK Management Suite Arbitrary File Upload Vulnerability

The Ivanti LANDESK Management Suite allows you to manage all client systems easily and efficiently. An arbitrary file upload vulnerability exists in the upl/asyncupload.asp web API endpoint in Ivanti LANDESK Management Suite 10.0.1.168 Service Update 5. An attacker can exploit this vulnerability ...

[SECURITY] [DSA 4455-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4455-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 03, 2019 https://www.debian.org/security/faq -...

USN-4003-1: Qt vulnerabilities

It was discovered that Qt incorrectly handled certain XML documents. A remote attacker could use this issue with a specially crafted XML document to cause Qt to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2018-15518 It was discovered that Qt incorrectly handle...

CVE-2015-7609

Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...

[SECURITY] [DLA 1808-1] sox security update

Package : sox Version : 14.4.1-5+deb8u4 CVE ID : CVE-2019-8354 CVE-2019-8355 CVE-2019-8356 CVE-2019-8357 Debian Bug : 927906 Several issues were found in SoX, the Swiss army knife of sound processing programs, that could lead to denial of service via application crash or potentially to arbitrary...

Qualys Cloud Platform (VM, PC) 8.19.1 New Features

This new release of the Qualys Cloud Platform VM, PC, version 8.19.1, includes newly added technology support for HP Safeguard and CISCO ACS 5, collected via Qualys Out-of-Band Configuration Assessment. Feature Highlights Qualys Policy Compliance PC New Technology Support - Qualys now supports th...

Xbox Two vs PlayStation 5: Which console is winning the race of anticipation?

By Uzair Amir Excitement is mounting among gamers as Microsoft and Sony continue to tease tantalizing details of their upcoming next-generation console releases. The PlayStation 5 is expected to launch towards the end of 2020 and lead architect Mark Cerny has already revealed details of the...