DEBIAN-CVE-2019-3843

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially...

GLSA-201904-25 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-25 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Patch: Multiple vulnerabilities

Background Patch takes a patch file containing a difference listing produced by the diff program and applies those differences to one or more original files, producing patched versions. Description Multiple vulnerabilities have been discovered in Patch. Please review the CVE identifiers reference...

Dovecot: Multiple vulnerabilities

Background Dovecot is an open source IMAP and POP3 email server. Description Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details Workaround There is no known...

GLSA-201904-14 : GnuTLS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-14 GnuTLS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced below for details. Impact : Please review the CVE identifiers referenced below for...

CVE-2019-0752

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862...

Debian: Security Advisory (DSA-4425-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-201904-07 : Mozilla Thunderbird and Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-07 Mozilla Thunderbird and Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird and Firefox. Please review the referenced Mozilla Foundation Security Advisories and CVE...

OPENSUSE-SU-2019:0081-1 Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306,...

Android Q — Google Adds New Mobile Security and Privacy Features

Google has recently released the first beta version of Android Q, the next upcoming version of Google's popular mobile operating system, with a lot of new privacy improvements and other security enhancements. Android Q, where Q has not yet been named, offers more control over installed apps, thei...

SUSE-SU-2019:0628-1 Security update for galera-3, mariadb, mariadb-connector-c

This update for mariadb, galera-3, mariadb-connector fixes the following issues: Security vulnerabilities addressed for mariadb: - CVE-2016-9843 bsc1013882 - CVE-2018-3058 bsc1101676 - CVE-2018-3060 - CVE-2018-3063 bsc1101677 - CVE-2018-3064 bsc1103342 - CVE-2018-3066 bsc1101678 - CVE-2018-3143...

Xen Project Process Context Identifiers Shadow Pagetables Denial of Service Vulnerability (XSA-294)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. Only x86 systems are affected. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware...

Xen Project Process Context Identifiers TLB Flushing Multiple Vulnerabilities (XSA-292)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities including denial of service, information disclosure, and privilege escalation. Only x86 systems are affected. Note that Nessus has checked the changeset versions...

The vulnerability of the Jenkins automation server allows a hacker to reuse registration data or session identifiers for authentication purposes.

The vulnerability of the Jenkins automation server is related to incorrect session duration. Exploiting this vulnerability allows a malicious actor to repeatedly use registration data or session identifiers for authentication purposes...

CVE-2019-0192

creationtimestamp| type| source ---|---|--- 2019-03-08 00:21:31+00:00| seen| https://t.me/cibsecurity/2944 2019-03-28 18:42:31+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5335 2019-03-28 21:42:52+00:00| published-proof-of-concept| https://t.me/antichat/4215 2019-09-13...

PT-2019-11330 · Jenkins · Jenkins Azure Vm Agents Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Azure VM Agents Plugin versions 0.8.0 and earlier Description: An information exposure issue exists that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This is due to a...

The vulnerability of the software platform for managing administrative policies and privileges, Policykit, arises from errors in processing large user identifier values, allowing attackers to bypass authentication procedures.

The vulnerability of the software platform for managing administrative policies and privileges via Policykit is related to errors in processing large user identifier values values exceeding INTMAX, which allows any systemctl command to be executed. Exploiting this vulnerability could enable a...

CVE-2019-5766

Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

USN-3876-1 avahi vulnerabilities

Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. CVE-2017-6519, CVE-2018-1000845...

The vulnerability of the JunOS operating system allows attackers to carry out attacks using predictable IP IDs.

The vulnerability of the JunOS operating system is related to the predictability of port IP IDs. Exploiting this vulnerability allows a remote attacker to carry out attacks using predictable IP IDs...