2806 matches found
Mobile Menace Monday: Implications of Google Play Protect
Along with the recent release of Google’s new OS, Android 8.0 Oreo, they also released a new security suite known as Google Play Protect. As blogged about in July in Play Protect: Android’s new security system is now available, this new suite has been available since mid-May. To reiterate As note...
Debian DSA-3950-1 : libraw - security update
Hossein Lotfi and Jakub Jirasek from Secunia Research have discovered multiple vulnerabilities in LibRaw, a library for reading RAW images. An attacker could cause a memory corruption leading to a DoS Denial of Service with craft KDC or TIFF file. %NASLMINLEVEL 70300 C Tenable Network Security,...
CVE-2017-1501
CVE-2017-1501 affects IBM WebSphere Application Server; the Admin Console could leave web services security bindings weaker after updates. IBM bulletins indicate affected WAS versions include 8.0, 8.5, and 9.0 lines (e.g., 9.0.0.0–9.0.0.4; 8.5.5.10/11; 8.0.0.13). The vulnerability score via CVSSv...
Debian DSA-3938-1 : libgd2 - security update
Matviy Kotoniy reported that the gdImageCreateFromGifCtx function used to load images from GIF format files in libgd2, a library for programmatic graphics creation and manipulation, does not zero stack allocated color map buffers before their use, which may result in information disclosure if a...
Debian DSA-3937-1 : zabbix - security update
Lilith Wyatt discovered two vulnerabilities in the Zabbix network monitoring system which may result in execution of arbitrary code or database writes by malicious proxies. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
IBM WebSphere Application Server 7.0 < 7.0.0.45 / 8.0 < 8.0.0.14 / 8.5 < 8.5.5.13 / 9.0 < 9.0.0.5 Information Disclosure (PI82630)
The version of IBM WebSphere Application Server running on the remote host is 7.0 prior to 7.0.0.45, 8.0 prior to 8.0.0.14, 8.5 prior to 8.5.5.13, or 9.0 prior to 9.0.0.5. It is, therefore, affected by an unspecified information disclosure flaw due to sensitive information being cached insecurely...
Debian DSA-3924-1 : varnish - security update
A denial of service vulnerability was discovered in Varnish, a state of the art, high-performance web accelerator. Specially crafted HTTP requests can cause the Varnish daemon to assert and restart, clearing the cache in the process. See https://varnish-cache.org/security/VSV00001.html for detail...
CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
Debian DLA-1030-1 : vim security update
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. For Debian 7 'Wheezy', these problems have been fixed in version 2:7.3.547-7+deb7u4. We recommend that you upgrade your vim packages. NOTE: Tenable Networ...
ManageEngine Firewall Analyzer < 8.0 Multiple Vulnerabilities
ManageEngine Firewall Analyzer is prone to access bypass and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
CVE-2017-1318
IBM MQ Appliance 8.0 (8.0.0.0–8.0.0.6) and 9.0.x CD releases (9.0.1–9.0.2) are affected by CVE-2017-1318, where an authenticated messaging administrator could execute arbitrary commands on the appliance due to a command-execution flaw. The IBM Security Bulletin confirms the affected versions and ...
Debian DSA-3911-1 : evince - security update
Felix Wilhelm discovered that the Evince document viewer made insecure use of tar when opening tar comic book archives CBT. Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. %NASLMINLEVEL 70300 C Tenable Network Security...
Debian DSA-3905-1 : xorg-server - security update
Two security issues have been discovered in the X.org X server, which may lead to privilege escalation or an information leak. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3905. The tex...
CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
UBUNTU-CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
CVE-2017-11109
CVE-2017-11109 : The Vim 8.0 vulnerability allows a crafted source (-S) file to cause a denial of service via an invalid free, with possible unspecified impact. Multiple connected sources confirm Vim 8.0 as affected and describe the DoS under crafted source conditions; no explicit fixes are docum...
CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...
CVE-2017-11109
Vim 8.0 allows attackers to cause a denial of service invalid free or possibly have unspecified other impact via a crafted source aka -S file. NOTE: there might be a limited number of scenarios in which this has security relevance...