The vulnerabilities of the ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c components of the SQLite database management system allow a hacker to cause a service failure.

The vulnerability of the ext/fts5/fts5hash.c and ext/fts5/fts5index.c components of the SQLite database management system is related to the use of a null pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Use of a One-Way Hash without a Salt vulnerability

Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-4313 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses a one-way cryptographic hash against an input that should not be reversible, such a...

Security Bulletin: Multiple vulnerabilities in MD5 Signature and Hash Algorithm, glibc and OpenSSL affect IBM Netezza Firmware Diagnostics Tools

Summary The MD5 "Sloth" vulnerability on TLS 1.2, glibc and OpenSSL are used by IBM Netezza Firmware Diagnostics Tools. IBM Netezza Firmware Diagnostics Tools has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expect...

Unspecified vulnerability in cPanel (CNVD-2019-36143)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability to...

AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE Brute Force Attack Vulnerabilities

AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE are both encrypted devices from the Danish company AutoPi.io. A security vulnerability exists in AutoPi.io AutoPi Wi-Fi/NB and AutoPi 4G/LTE versions prior to 2019-10-15, which stems from the fact that the default WiFi and WiFi SSIDs are both derived fr...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

Default credentials

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-12941

AutoPi Wi-Fi/NB and 4G/LTE devices before 2019-10-15 allows an attacker to perform a brute-force attack or dictionary attack to gain access to the WiFi network, which provides root access to the device. The default WiFi password and WiFi SSID are derived from the same hash function output input i...

CVE-2019-14510

An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx e.g., FSAdmin123456789 on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed...

CVE-2019-14510

An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx e.g., FSAdmin123456789 on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed...

Default configuration

An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx e.g., FSAdmin123456789 on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed...

CVE-2019-14510

CVE-2019-14510 affects Kaseya VSA RMM up to 9.5.0.22. The default LAN Cache configuration creates a local account FSAdminxxxxxxxxx on the LAN Cache host and all assigned clients, placing it in each client’s local Administrators group. If a client is a Domain Controller, the account is created as ...

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

CVE-2019-17497

Technical details about CVE-2019-17497 are not present in the provided connected documents; public information about affected product/version/impact is not available here. Monitor for updates.

CVE-2019-17497

Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files a related issue to CVE-2018-4993. For example, an NTLM hash is sent for a link to \192.168.0.2\C$\file.pdf without user interaction...

Unspecified Vulnerability in Tracker Software PDF-XChange Editor

Tracker Software PDF-XChange Editor is a Canadian Tracker Software company's set of software for viewing, editing PDF format files. A security vulnerability exists in Tracker Software PDF-XChange Editor versions prior to 8.0.330.0, which can be exploited by an attacker to steal NTLM hashes and th...

PT-2019-15171 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor versions prior to 8.0.330.0 Description: The issue allows for NTLM SSO hash theft using crafted FDF or XFDF files. This can occur when a link to a file, such as '192.168.0.2C$file.pdf', is accessed without user interaction,...

Description of the security update for Office 2010: October 8, 2019

Description of the security update for Office 2010: October 8, 2019 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. . To learn more about the vulnerability, see...