Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38589)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Information Disclosure Vulnerability (CNVD-2019-28871)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android Q. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker cou...

CVE-2019-15292

An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalkprocexit, related to net/appletalk/atalkproc.c, net/appletalk/ddp.c, and net/appletalk/sysctlnetatalk.c...

ZOHO ManageEngine ServiceDesk Plus Information Disclosure Vulnerability (CNVD-2019-32072)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. An information...

Google Android Runtime Components Multiple Local Privilege Escalation Vulnerabilities

Description Google Android is prone to multiple local privilege-escalation vulnerabilities. An attacker can exploit these issues to gain elevated privileges. These issues are being tracked by Android Bug IDs A-113039724 and A-110035108. Technologies Affected Google Android 1.5 Google Android 1.6...

Google Android Library Components Multiple Local Privilege Escalation Vulnerabilities

Description Google Android is prone to multiple local privilege-escalation vulnerabilities. An attacker can exploit these issues to gain elevated privileges. These issues are being tracked by Android Bug IDs A-110986616 and A-79593569. Technologies Affected Google Android 1.5 Google Android 1.6...

XDR Is The Best Remedy As Attackers Increasingly Seek To Evade EDR

Real enterprises are messy places. One messy reality is that enterprises don’t manage all their endpoints. A smart colleague turned me onto using the % of endpoints and servers managed as a prime security metric. On one end of the spectrum are places like universities that maybe manage 10% of the...

[SECURITY] Fedora 30 Update: postgresql-11.5-1.fc30

PostgreSQL is an advanced Object-Relational database management system DBM S. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine ...

CVE-2019-7959

Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could lead to arbitrary code execution...

CloudBees Jenkins TestLink Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An information disclosure...

Important: Red Hat Security Advisory: mysql:8.0 security update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The following packages have been upgraded to a later upstream version: mysql 8.0.17. Security Fixes: mysql: Server: Replication multiple unspecified vulnerabilities...

Sampler - A Tool For Shell Commands Execution, Visualization And Alerting (Configured With A Simple YAML File)

Sampler is a tool for shell commands execution, visualization and alerting. Configured with a simple YAML file. Installation macOS brew cask install sampler or curl -Lo /usr/local/bin/sampler https://github.com/sqshq/sampler/releases/download/v1.0.1/sampler-1.0.1-darwin-amd64 chmod +x...

August 13, 2019—KB4512482 (Security-only update)

None None...

August 13, 2019—KB4512518 (Monthly Rollup)

None None...

ShapeShift KeepKey Information Disclosure Vulnerability

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. An information disclosure vulnerability exists in ShapeShift KeepKey, which can be exploited by unauthorized attackers to obtain sensitive information about affected components...

[SECURITY] Fedora 30 Update: os-autoinst-4.5-19.20190706gitc3d5e8a.fc30

The OS-autoinst project aims at providing a means to run fully automated tests. Especially to run tests of basic and low-level operating system components such as bootloader, kernel, installer and upgrade, which can not easily and safely be tested with other automated testing frameworks. However,...

cPanel Information Disclosure Vulnerability (CNVD-2019-25328)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 78.0.18. The vulnerability stems from an error in t...

The vulnerability of the WLS Core Components, a component of the Oracle WebLogic Server software from Oracle Fusion Middleware, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WLS Core Components of the Oracle WebLogic Server component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

Design/Logic Flaw

Fred MODX Revolution 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote Code Execution. The component is: assets/components/fred/web/elfinder/connector.php. The attack vector is: Uploading a PHP file or change data in the database. The fixed version is:...