3792 matches found
January 8, 2019—KB4480960 (Security-only update)
None None...
January 8, 2019—KB4480970 (Monthly Rollup)
None None...
The vulnerability of the NTP synchronization protocol lies in the insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the NTP synchronization protocol lies in insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets...
The vulnerability of the xcf_load_stream function in the GIMP graphics editor, which involves reading beyond the buffer limit, allows attackers to cause service failures, compromise data integrity, and undermine data confidentiality.
The vulnerability of the xcfloadstream function /xcf/xcf.c in the GIMP graphic editor, GNU Image Manipulation Program, relates to reading beyond the buffer boundaries during string processing, especially when dealing with strings that do not contain the null character '\0'. Exploiting this...
The vulnerability of the Web framework component of the Cisco IOS XE operating system allows a hacker to trigger a service failure.
The vulnerability of the Web framework component of the Cisco IOS XE operating system arises due to errors in parsing HTTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted HTTP packet...
The vulnerability of the Cisco Discovery protocol’s implementation in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Discovery protocol in Cisco IOS and Cisco IOS XE operating systems is related to errors in memory management mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted packets...
The vulnerability of the embedded SQL database SQLite, related to deficiencies in input data processing, allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the embedded SQL database SQLite is related to deficiencies in data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by using specially crafted SQL queries...
The vulnerability of the console-based graphic editor ImageMagick, related to improper memory management, allows a hacker to cause a system failure or execute arbitrary code.
The vulnerability of the console-based graphic editor ImageMagick is related to improper memory handling. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...
DEBIAN-CVE-2018-18347
Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary origin via a crafted HTML page...
Jenkins < 2.146 and < 2.138.2 LTS Multiple Vulnerabilities - Windows
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the Routing Protocols Daemon (RPD) service on the JunOS operating system allows a hacker to trigger a service failure.
The vulnerability of the Routing Protocols Daemon RPD service on the JunOS operating system is related to an uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series allows a hacker to cause maintenance failures.
The vulnerability of the JunOS operating system in Juniper switches of the QFX5000 and EX4600 series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
[ASA-201811-12] powerdns: denial of service
Arch Linux Security Advisory ASA-201811-12 ========================================== Severity: Medium Date : 2018-11-12 CVE-ID : CVE-2018-10851 CVE-2018-14626 Package : powerdns Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-804 Summary ======= The package powerd...
Consistent backup failures after installing vSphere 6.7 U1
Challenge After updating vCenter to 6.7U1, processing of all VMs fails with "Object reference not set to an instance of an object." Cause The issue is triggered by an update to the vSphere API version in vCenter 6.7 U1. Solution The issue affects only Veeam Backup & Replication 9.5 Update 3a...
The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.
The vulnerability of the Intel Active Management Technology AMT implementation of the Intel Converged Security and Manageability Engine CSME and Intel Management Engine ME arises due to errors in processing memory objects. Exploiting this vulnerability can allow a malicious actor to cause service...
Moderate: Red Hat Security Advisory: openstack-nova security and bug fix update
An update for openstack-nova is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
The vulnerability of the OData library, related to errors in query processing, allows a perpetrator to trigger a service failure.
The vulnerability of the OData library is related to errors in query processing. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of web-based services of microprogramming software for programmable logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, and Modicon M340—allows a intruder to trigger a service failure.
The vulnerability of web-based services for microprogramming software-controlled Schneider Electric Modicon Premium, Modicon Quantum, and Modicon M340 devices lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor...
openSUSE Security Update : kbuild / virtualbox (openSUSE-2018-938) (Spectre)
This update for kbuild, virtualbox fixes the following issues : kbuild changes : - Update to version 0.1.9998svn3110 - Do not assume glibc glob internals - Support GLIBC glob interface version 2 - Fix build failure boo1079838 - Fix build with GCC7 boo1039375 - Fix build by disabling vboxvideodrv....
CVE-2018-15859
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...