9847 matches found
SUSE SLED15 / SLES15 Security Update : freeradius-server (SUSE-SU-2019:1086-1)
This update for freeradius-server fixes the following issues : Security issues fixed : CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points bsc1132549. CVE-2019-11234: Fixed an authentication bypass caused by...
CVE-2019-11412
CVE-2019-11412 affects Artifex MuJS 1.0.5 where jscompile.c can trigger a denial of service due to an invalid stack-frame jump from a missing ENDTRY opcode call. The issue is described in the CVE entry; public remediation references indicate newer MuJS releases (e.g., MuJS 1.0.9) addressing the v...
CVE-2019-11412
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...
CVE-2019-11412: Always-Incorrect Control Flow Implementation
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...
PT-2019-12297
Name of the Vulnerable Software and Affected Versions Artifex MuJS version 1.0.5 Description An issue in the jscompile.c file can cause a denial of service due to an invalid stack-frame jump because it lacks an ENDTRY opcode call. Recommendations For Artifex MuJS version 1.0.5, consider applying ...
Broadcom WiFi chipset drivers contain multiple vulnerabilities
Overview The Broadcom wl driver and the open-source brcmfmac driver for Broadcom WiFi chipsets contain multiple vulnerabilities. The Broadcom wl driver is vulnerable to two heap buffer overflows, and the open-source brcmfmac driver is vulnerable to a frame validation bypass and a heap buffer...
Security Bulletin: Vulnerability in Apache ActiveMQ Affects IBM Control Center (CVE-2019-0222)
Summary IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. Vulnerability Details CVEID: CVE-2019-0222 DESCRIPTION: IBM Control center is affected by a Corrupt MQTT frame that can cause broker shutdown in Apache ActiveMQ. CVSS Base Score: 7.5...
PT-2019-12500 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.7 Description: A NULL pointer dereference can occur when megasas create frame pool fails in megasas alloc cmds in drivers/scsi/megaraid/megaraid sas base.c. This causes a Denial of Service, related to a...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4612)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4612 advisory. - can: gw: ensure DLC boundaries after CAN frame modification Oliver Hartkopp Orabug: 29215297 CVE-2019-3701 CVE-2019-3701 - exec: Fix mem leak in...
UBUNTU-CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...
CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the iswlceventframe function will cause this frame to be discarded and unprocessed. I...
CVE-2018-1853: Improper Restriction of Rendered UI Layers or Frames
IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch...
Passit: URL is vulnerable to clickjacking https://app.passit.io/
URLs do not have X-FRAME-OPTIONS set to DENY or SAMEORIGIN, and they are vulnerable to clickjacking. Reproduce steps: 1. enter your credentials and click on stay logged into this device then login 2. Run under the browser's code and you will see that the listed links are vulnerable to clickjackin...
CVE-2019-0222
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...
Google Chrome Privilege Escalation Local File Access
The vulnerability of Google Chrome relates to errors in the frame navigation function of Blink. Exploiting this vulnerability can allow an attacker to gain access to files on the local file system using a specially created extension...
GHSA-JPV3-G4CC-6VFX Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive...
CVE-2019-3876
A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction ...
PT-2019-5707
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2 Description The issue is related to a NULL pointer dereference in the tw5864 handle frame function in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service. This could allow an attacker t...
