4799 matches found
BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver
The operators behind the RobbinHood ransomware are using a vulnerable, legacy driver from Taiwan-based motherboard manufacturer Gigabyte in order to get around antivirus protections. The âbring-your-own-bugâ tactic is likely to crop up in other attacks going forward, according to security analyst...
PT-2020-19894 ¡ Gitlab ¡ Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.9 through 12.7.2 Description: The issue is related to insecure permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...
PT-2020-19252 ¡ Gitlab ¡ Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.3 and later Description: An issue was discovered that could lead to a GitLab Workhorse bypass, resulting in package and file disclosure via request smuggling. Recommendations: For GitLab EE versions 11.3 and later, at th...
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (ADV200001)
This host is missing a critical security update according to Microsoft advisory ADV200001. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Huawei EulerOS: Security Advisory for firefox (EulerOS-SA-2017-1011)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2017-1104)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4603-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4603. The...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200116)
Security Fixes : - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement CVE-2019-17026 - Mozilla: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 - Mozilla: Type Confusion in XPCVariant.cpp CVE-2019-17017 - Mozilla: Memory safety bugs fixed in Firef...
Debian: Security Advisory (DLA-2071-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft .NET Framework Multiple RCE Vulnerabilities (KB4535102)
This host is missing a critical security update according to Microsoft KB4535102 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
January 14, 2020âKB4534293 (OS Build 17134.1246)
None None...
January 14, 2020âKB4534309 (Security-only update)
None None...
January 14, 2020âKB4534288 (Security-only update)
None None...
January 14, 2020âKB4534296 (OS Build 15063.2254)
None None...
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019
Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operatin...
Updated ghostpcl packages fix security vulnerabilities
This updates ghostpcl from 9.05 which dates from 2012 February 8 to be at the same version as ghostscript, ie. 9.27 with fixes for known CVEs as like the ones fixed in MGASA-2017-0355, MGASA-2017-0430, MGASA-2018-0142, MGASA-2018-0219, MGASA-2018-0378, MGASA-2018-0408, MGASA-2018-0466,...
Citrix ADC and Citrix NetScaler Gateway Arbitrary Code Execution (CTX267027)
The remote Citrix ADC or Citrix NetScaler Gateway device is affected by an arbitrary code execution vulnerability. An unauthenticated, remote attacker may be able to leverage this vulnerability to perform arbitrary code execution on an affected host. Please refer to advisory CTX267027 for more...
Fedora 31 : openslp (2019-1e5ae33e87)
Security fix for CVE-2019-5544 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
nss-softokn security update
3.44.0-6.0.1 - Add fips140-2 DSA Known Answer Test fix Orabug 26696773 - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix Orabug 26617866, Orabug 26617833, Orabug 26617780 3.44.0-6 - Fix out-of-bounds write in NSCEncryptUpdate 1775909...