ipc-computer.de Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8505 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ipc-computer.de website and its users. Following coordinat...

CVE-2019-12408: Missing Initialization of Resource

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-18811

A memory leak in the sofsetgetlargectrldata function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption by triggering sofgetctrlcopyparams failures, aka CID-45c1380358b1...

CVE-2019-18811

A memory leak in the sofsetgetlargectrldata function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption by triggering sofgetctrlcopyparams failures, aka CID-45c1380358b1...

Mozilla Firefox ESR < 31.7 Multiple Vulnerabilities

Binary data 701255.prm...

Moderate: Red Hat Security Advisory: libqb security and bug fix update

An update for libqb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

PT-2019-6274

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to insufficient input validation in the nanomsg library of FortiClient for Linux, which can be exploited by a remote attacker to cause a denial of service by sendi...

PT-2019-6273

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below FortiClient for Linux versions 6.2.2 and below Description The issue is related to a privilege escalation vulnerability in the implementation of the backup configuration script. It is caused by...

PT-2019-6275

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description The issue is related to the Export logs function in FortiClient for Linux, which is associated with incorrect restriction of the directory path name with limited access. Exploitation o...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20191016)

Security Fixes : - kernel: Use-after-free in blkdrainqueue function in block/blk-core.c CVE-2018-20856 - kernel: Heap overflow in mwifiexupdatebssdescwithie function in marvell/mwifiex/scan.c CVE-2019-3846 - hardware: bluetooth: BR/EDR encryption key negotiation attacks KNOB CVE-2019-9506 - kerne...

CVE-2019-9678

Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X fo...

CVE-2019-9677

CVE-2019-9677 concerns buffer overflow in the CGI interface handling of Dahua IP cameras. Affected models (e.g., IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDW5X2X, IPC-HFW5X2X) are vulnerable for builds prior to 18 August 2019. The root cause ...

CVE-2019-9678

CVE-2019-9678 affects several Dahua network cameras/NVRs (e.g., IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDW5X2X, IPC-HFW5X2X) where Build time before 18 Aug 2019 is vulnerable. The issue is a denial-of-service during login that can crash the...

PT-2019-19794

Name of the Vulnerable Software and Affected Versions Dahua products versions prior to August 18, 2019 Description The issue allows attackers to obtain the IP address and device model information of the device by constructing malicious data packets. This affects various Dahua products, including...

CVE-2019-9680: Undefined Security Weakness

Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include:...

PT-2019-19792

Name of the Vulnerable Software and Affected Versions Dahua products versions prior to August 18, 2019 Description The issue allows an attacker to cause a denial of service during the login process by constructing a malicious packet, which can crash the device. This affects various Dahua products...

PT-2019-19793

Name of the Vulnerable Software and Affected Versions Dahua IPC-HDW1X2X, IPC-HFW1X2X, IPC-HDW2X2X, IPC-HFW2X2X, IPC-HDW4X2X, IPC-HFW4X2X, IPC-HDBW4X2X, IPC-HDW5X2X, IPC-HFW5X2X versions prior to August 18, 2019 Description The issue arises from a lack of permission separation in some of Dahua's...

CVE-2019-9679: Incorrect Default Permissions

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build tim...

CVE-2019-9678: Undefined Security Weakness

Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X fo...