7347 matches found
UBUNTU-CVE-2019-17010
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
UBUNTU-CVE-2019-17008
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
UBUNTU-CVE-2019-17012
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird 68.3,...
UBUNTU-CVE-2019-17005
The plain text serializer used a fixed-size array for the number of elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 68.3, Firefox ESR 68.3, and Firefox 71...
The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome allows a malicious actor to write arbitrary files to the device’s file system.
The vulnerability of the Skia library used by browsers such as Firefox ESR, Firefox, and Google Chrome relates to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the device’s file system remotely...
CVE-2019-16544
Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
CVE-2019-16542
Jenkins Anchore Container Image Scanner Plugin 1.0.19 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...
PT-2019-4525 · Illumos +1 · Illumos +1
Name of the Vulnerable Software and Affected Versions: Nexenta NexentaStor versions 4.0.5 through 5.1.2 Illumos affected versions not specified Description: The issue allows an attacker to have unintended access, for example, an attacker with WRITE XATTR can change permissions. This occurs due to...
November 19, 2019—KB4525244 (Preview of Monthly Rollup)
None None...
November 19, 2019—KB4525251 (Preview of Monthly Rollup)
None None...
Vulnerability in Firefox web browsers, Firefox ESR, and Thunderbird email client, caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
USN-4185-3 linux, linux-hwe, linux-oem vulnerability and regression
USN-4185-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was incomplete on 64-bit Intel x86 systems. Also, the update introduced a regression that broke KVM guests where extended page tables EPT are...
CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to potentially enable denial of service of the host system via local access...
November 2019 security updates are available!
We have released the November security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...
November 2019 security updates are available!
We have released the November security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found in the Security Update Guide. As a reminder,...
November 12, 2019—KB4525235 (Monthly Rollup)
None None...
November 12, 2019—KB4525233 (Security-only update)
None None...
November 12, 2019—KB4525234 (Monthly Rollup)
None None...