Security Bulletin: Action required for WebSphere Message Broker Hypervisor Edition V8.0 for security vulnerabilities in Red Hat Linux

Summary IBM WebSphere Message Broker Hypervisor Edition V8.0 ship with Red Hat Enterprise Linux RHEL Server 6.2 which is vulnerable to: CVE-2019-1354 Vulnerability Details CVEID: CVE-2019-13454 DESCRIPTION: ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in...

Security Bulletin: IBM Integration Bus Hyper visor Edition V9.0 require customer action for security vulnerabilities in Red Hat Linux

Summary IBM Integration Bus Hypervisor Edition V9.0 ship with Red Hat Enterprise Linux RHEL Server 6.2 which is vulnerable to: CVE-2019-1354 Vulnerability Details CVEID: CVE-2019-13454 DESCRIPTION: ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c. CV...

Qualys Security Advisory - OpenBSD Dynamic Loader Privilege Escalation

Qualys Security Advisory Local Privilege Escalation in OpenBSD's dynamic loader CVE-2019-19726 ============================================================================== Contents ============================================================================== Summary Analysis Demonstration...

OpenBSD CVE-2019-19726 Local Privilege Escalation Vulnerability

Description OpenBSD is prone to a local privilege escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. OpenBSD versions 6.1, 6.2, 6.5 and 6.6 are vulnerable. Other versions may also be affected. Technologies Affected OpenBSD Openbsd 6.1 OpenBSD Openbsd 6....

Command injection

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

Cross site scripting

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

Cross site scripting

Adobe Experience Manager versions 6.5, 6.4, 6.3 and 6.2 have a reflected cross site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2019-8084

Adobe Experience Manager 6.x (versions 6.5, 6.4, 6.3 and 6.2) contain a reflected cross-site scripting vulnerability (CVE-2019-8084). Exploitation could lead to sensitive information disclosure. The available documents describe the vulnerability and affected versions but do not provide concrete r...

CVE-2019-15901

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

CVE-2019-9855

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...

CVE-2019-9854

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice...

RSVPMaker SQL Injection Vulnerability

RSVPMaker is a WordPress event scheduling and RSVP tracking plugin. A SQL injection vulnerability exists in RSVPMaker versions prior to 6.2. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2019-15646

The rsvpmaker plugin before 6.2 for WordPress has SQL injection...

OpenSSH < 6.2 DoS

Binary data 701164.prm...

Design/Logic Flaw

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

Tzumi Electronics Klic Lock Authentication Bypass

CVE-2019-11334 MIT License Copyright c 2019 Kerry Enfinger Python program to unlock any Tzumi Klic smart locks Model 5686 Firmware 6.2 May work on other smart locks Requires valid account email and password from Klic mobile application import argparse import requests import json from subprocess...

Azure File Sync Agent v6.2 Release – June 2019 (KB4489738)

Update for Azure File Sync agent version 6.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v6.2 Release – June 2019 (KB4489738)

Update for Azure File Sync agent version 6.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v6.2 Release – June 2019 (KB4489738)

Update for Azure File Sync agent version 6.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Authentication flaw

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...