PT-2018-1995

Name of the Vulnerable Software and Affected Versions McAfee True Key Windows Client versions 5.1.230.7 and earlier Description The issue is related to privilege management errors in the McAfee True Key Windows Client, which can be exploited to execute arbitrary commands. This can allow an attack...

DEBIAN-CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

Google Chrome Domain Spoofing Vulnerability (CNVD-2019-01765)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A domain spoofing vulnerability exists in Google Chrome. The vulnerability stems from the URL Formatter in Google Chrome mishandling obfuscated characters. A remote...

PT-2018-19330

Уязвимость утилиты сравнения изображений imgcmp связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-19346

Уязвимость утилиты создания читаемых версий DTB-файлов fdtdump связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-19343

Уязвимость компонента Virtual Distributed Ethernet Switch vde l3 связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2809

Name of the Vulnerable Software and Affected Versions gpxlogger affected versions not specified Description The issue is related to initialization errors in the gpxlogger data collection program. Exploitation of this issue may allow an attacker to cause the program to crash unexpectedly...

PT-2018-2922

Name of the Vulnerable Software and Affected Versions nettle-hash affected versions not specified Description The issue is caused by segmentation errors in the nettle-hash cryptographic hash function tool. Exploitation of this issue may allow an attacker to cause a denial of service by inputting ...

PT-2018-19329

Уязвимость утилиты конвертирования JPEG2000 файлов jasper связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2925

Name of the Vulnerable Software and Affected Versions dvipos affected versions not specified Description The issue is caused by segmentation errors in the position calculation tool for DVI files in dvipos. Exploitation of this issue may allow an attacker to cause a denial of service by inputting ...

Windows 8.1 and Server 2012 R2 KB4345424 Update

The remote Windows host is missing update 4345424. This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: - Addressed issue in which some devices may experience stop error 0xD1 when you run network monitoring workloads...

chromium-browser: Use-after-free in GPU

Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CronJob API Privilege Escalation

The vulnerability in the CronJob API of Cisco Digital Network Architecture DNA platform is caused by errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges remotely...

Cisco Meeting Server Information Disclosure

The vulnerability of the Cisco Meeting Server platform arises from errors in processing user requests. Exploiting this vulnerability allows a malicious actor to gain access to protected information through specially crafted requests...

Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN

Vulnerabilities discovered by Carl Hurd and Jared Rittle of Cisco Talos. Cisco Talos is disclosing multiple vulnerabilities in the TP-Link TL-R600VPN router. TP-Link produces a number of different types of small and home office SOHO routers. Talos discovered several bugs in this particular router...

Updated squid packages fix security vulnerabilities

Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors CVE-2018-19131. Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack CVE-2018-19132...

6 security concerns to consider when automating your business

Automation is an increasingly-enticing option for businesses, especially when those in operations are in a perpetual cycle of "too much to do and not enough time to do it." When considering an automation strategy, business representatives must be aware of any security risks involved. Here are six...

Cisco Mobility Express DoS

The vulnerability of the Cisco Mobility Express software in Cisco Aironet Access Points of the 1560, 1800, 2800, and 3800 series is caused by errors in traffic processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

JunOS Maintenance Failure

The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

libmspack security update

CentOS Errata and Security Advisory CESA-2018:3327 An update for libmspack is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...