7589 matches found
CVE-2019-15055
creationtimestamp| type| source ---|---|--- 2019-08-28 02:36:04+00:00| seen| Telegram/47V5cR1nefqmXQ7DYU9a1xbLkni5rPjB4-5s2mhVipZIZU 2019-08-29 13:06:20+00:00| seen| Telegram/o4wu5TbsbYweNMez6uKg20bOiPvN1svfH-6rM8cu5cq-9nc...
CVE-2014-10382
creationtimestamp| type| source ---|---|--- 2019-08-23 00:32:51+00:00| seen| https://t.me/cibsecurity/6326 2019-08-29 16:33:48+00:00| seen| https://t.me/cibsecurity/6443...
GLSA-201908-10 : Oracle JDK/JRE: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201908-10 Oracle JDK/JRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Oracles JDK and JRE software suites. Please review the CVE identifiers referenced below for details. Impact : Please review the...
libarchive: Multiple vulnerabilities
Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced...
glibc: Multiple vulnerabilities
Background glibc is a package that contains the GNU C library. Description Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workarou...
SUSE-SU-2019:2106-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. - CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages bsc1140520. - CVE-2019-13310: Fixed a...
CVE-2019-14473
eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. Consequently, a valid guest level or user level account can create a new admin level account, read the service messages, clear the system protocol or modify/delete internal programs, etc. pp...
OPENSUSE-SU-2019:1813-1 Security update for MozillaThunderbird
This update for MozillaThunderbird version 60.8 fixes the following issues: Security issues fixed: - CVE-2019-9811: Sandbox escape via installation of malicious language pack bsc1140868. - CVE-2019-11711: Script injection within domain through inner window reuse bsc1140868. - CVE-2019-11712:...
SUSE-SU-2019:1960-1 Security update for MozillaThunderbird
This update for MozillaThunderbird version 60.8 fixes the following issues: Security issues fixed: - CVE-2019-9811: Sandbox escape via installation of malicious language pack bsc1140868. - CVE-2019-11711: Script injection within domain through inner window reuse bsc1140868. - CVE-2019-11712:...
SUSE-SU-2019:1910-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release bsc1111331 Four new speculative execution information leak issues have been identified in Intel CPUs. bsc1111331 - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling MSBD...
PT-2019-4893 · Xen +1 · Xen +1
Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.12 Description: The issue is related to an incompatibility between Process Context Identifiers PCID and TLB flushes, allowing x86 PV guest OS users to cause a denial of service or gain privileges. This is due to...
Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions
Smartphones are a goldmine of sensitive data, and modern apps work as diggers that continuously collect every possible information from your devices. The security model of modern mobile operating systems, like Android and iOS, is primarily based on permissions that explicitly define which sensiti...
Over 1,300 Android Apps Caught Collecting Data Even If You Deny Permissions
Smartphones are a goldmine of sensitive data, and modern apps work as diggers that continuously collect every possible information from your devices. The security model of modern mobile operating systems, like Android and iOS, is primarily based on permissions that explicitly define which sensiti...
CVE-2019-6635
creationtimestamp| type| source ---|---|--- 2019-07-04 18:00:03+00:00| seen| https://t.me/cveNotify/186 2019-07-05 17:00:16+00:00| seen| https://t.me/cveNotify/242...
CVE-2019-13074
creationtimestamp| type| source ---|---|--- 2019-07-01 07:17:01+00:00| seen| Telegram/xADcJHvbl80L1aSpPUDb8qsDyOlCjAaYyJv5UKHSmc4u5lc 2020-06-01 02:07:41+00:00| seen| Telegram/RYuO9rnZyZatuBLmi4stN6fr4cvIa3LCbuSc0quitWP1aoWi...
The vulnerability of the jsm_probe_one handler implementation in Linux kernels allows a hacker to trigger a service failure.
The vulnerability in the implementation of the jsmprobeone function in the drivers/tty/serial/jsm/jsm.ko kernel of the Linux operating system is caused by a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a Digi International Neo and Classi...
The vulnerability of the monitoring panel for Cisco Unified Intelligence Center’s reporting functions allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the monitoring panel for creating Cisco Unified Intelligence Center reports is related to improper control of resource identifiers. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information by usin...
The vulnerability of the eLearning Server 4G system regarding access control allows a hacker to gain access and modify the user’s portfolio.
The vulnerability of the eLearning Server 4G system management and development framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access—and modify—user portfolios by altering the value of the user identifier in HTTP request...