Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Bridge CC, Experience Manager, and Dreamweaver. An attacker could exploit one of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

DEBIAN-CVE-2019-13164

qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name obtained from bridge.conf or a --br=bridge option is limited to the IFNAMSIZ size, which can lead to an ACL bypass...

UBUNTU-CVE-2019-13164

qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name obtained from bridge.conf or a --br=bridge option is limited to the IFNAMSIZ size, which can lead to an ACL bypass...

The vulnerability in the implementation of the ddb_open handler in the kernel of the Astra Linux operating system allows a hacker to cause a service failure.

The vulnerability in the implementation of the ddbopen handler in the kernel of the Astra Linux operating system the loaded module is drivers/media/pci/ddbridge/ddbridge.ko is related to a memory leak. In the ddbopen function, a call is made to the ddbsiminorinode array, which contains 32 element...

CVE-2019-6169

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6168

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6166

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery...

CVE-2019-6169

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6168

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6167

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6167

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6166

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery...

Cross site request forgery (csrf)

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery...

Design/Logic Flaw

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

Remote code execution

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

Remote code execution

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6169

CVE-2019-6169 affects Lenovo Service Bridge prior to version 4.1.0.1. The vulnerability allows unencrypted FTP downloads, exposing confidentiality (partial per CVSS2; high per CVSS3) without authentication over network. Lenovo’s advisories indicate upgrade to 4.1.0.1 or later to remediate. The pu...

CVE-2019-6166

CVE-2019-6166 affects Lenovo Service Bridge prior to version 4.1.0.1. The connected records identify a cross‑site request forgery vulnerability in Lenovo Service Bridge and specify that upgrading to version 4.1.0.1 or later mitigates the issue. The exact exploitation details, affected components/...

CVE-2019-6169

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6167

Lenovo Service Bridge vulnerability CVE-2019-6167 affects Lenovo Service Bridge prior to 4.1.0.1 and could allow remote code execution. The issue is tied to the Lenovo Service Bridge application (Windows), with exploitation confirmed in sources referencing remote code execution risk when versions...