Windows RDP DoS

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

PAN-OS Memory Corruption

The vulnerability of the PAN-OS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption or service failures when the current client interactive session is re-executed...

August 13, 2019—KB4512486 (Security-only update)

None None...

Intel Graphics Driver Compiler

The vulnerability in the unified shader compiler of Intel Graphics Driver software exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause failures in host systems...

3D-acceleration Hypervisor DoS

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE-SU-2019:2036-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation bsc1141784. - CVE-2019-2762: Exceptional throw cases bsc1141782. - CVE-2019-2766: Improve file protocol handling bsc1141789. - CVE-2019-2769: Better...

Kernel update: Virtuozzo ReadyKernel patch 84.1 for Virtuozzo 7.0.11

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernel 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11. Vulnerability id: PSBM-95772 pcompact operation is much slower for the containers on Virtuozzo Storage than for the ones stored locally...

Precision Time Protocol DoS

The vulnerability of the Precision Time Protocol PTP implementation in the Cisco IOS operating system is related to errors in processing PTP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted PTP packets...

Oracle Database Server Text Unauthorized Access

The vulnerability of the Oracle Text component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures using the Oracle Net protocol stack...

Europe’s Galileo Satellite Outage Serves as a Warning

The dramatic EU Galileo incident underscores the threat of satellite timing and navigation system failures...

SnCloneVault.sys DoS

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in data input control within the driver. Exploiting this vulnerability can allow attackers to cause service failures...

Jenkins Token Macro Plugin XML Link Restriction

The vulnerability of the Jenkins Token Macro plugin is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to forge requests on the server side or cause service failures...

VipNet Coordinator DoS

The vulnerability of the VipNet Coordinator HW software architecture related to information protection is linked to memory overflow in the hard drive. Exploiting this vulnerability allows a malicious actor to disrupt the MFTP protocol-based information exchange between all nodes of the ViPNet...

Yubico libu2f-host DoS

The vulnerability of the devs.c file in the Yubico libu2f-host library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures due to incorrect analysis of the init respon...

Fedora 30 : fossil (2019-f350634b40)

Update to 2.8 fixes rhbz1581180 rhbz1603993 rhbz1674893 and rhbz1524335 - Removed upstreamed patch - Bug 1524335 - CVE-2017-17459 fossil: Command injection via malicious ssh URLs fedora-all - Bug 1581180 - Update fossil version to 2.6 currently is 2.2 - Bug 1603993 - fossil: FTBFS in Fedora...

Python interpreter Syntax Analysis DoS

The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

StoreFront 1906.1.0.27 upgrade and installation issues

The following issues have been discovered with StoreFront1906.1.0.27concerning upgrading and uninstalling: 1. If you attempt to upgrade to StoreFront 1906 from StoreFront 3.7, or from a version of StoreFront that was upgraded from StoreFront 3.7, the upgrade fails. WSP-4386 2. Uninstallation of...

IBM Spectrum Protect Buffer Overflow

The vulnerability of the IBM Spectrum Protect server and data protection agent is related to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the server or data protection agent...

Cisco Security Manager Reporting XML External Object Disclosure DoS

The vulnerability of the reporting software for Cisco Security Manager extended security environments is related to errors in restricting XML links to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information and cause service failure...

VMware Hypervisor Information Disclosure

The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...