CVE-2019-3780 Cloud Foundry Container Runtime Leaks IAAS Credentials

Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

Code injection

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

CVE-2019-7175

ImageMagick has a confirmed vulnerability CVE-2019-7175: memory leaks in DecodeImage within coders/pcd.c present in affected releases prior to 7.0.8-25. The issue causes memory consumption/exhaustion when processing certain PCX/PCD inputs, with no explicit exploitation details provided in the doc...

CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

ImageMagick -- multiple vulnerabilities

cvedetails.com reports: CVE-2019-7175: In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. CVE-2019-7395: In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. CVE-2019-7396: In ImageMagick before 7.0.8-25, a memory leak exist...

CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

Information disclosure

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8259

UltraVNC revision 1198 contains multiple memory leaks CWE-655 in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8259

CVE-2019-8259 affects UltraVNC revisions around 1198. The issue is memory leaks in the VNC client code that could allow reading stack memory and, with another vulnerability, bypass ASLR, potentially leading to information disclosure. Siem ens/ICS advisories confirm the condition and note that fix...

Check your VPN DNS test tool legitimacy: Is it “good” or deceptive

By Zehra Ali Does your VPN leaks DNS data? Does the DNS testing tool you're using shows real results or shows sponsored results for affiliate marketing? Virtual private network VPN users are increasing at a great pace due to growing privacy concerns and numerous VPN options, including both, the...

On the Security of Password Managers

There's new research on the security of password managers, specifically 1Password, Dashlane, KeePass, and Lastpass. This work specifically looks at password leakage on the host computer. That is, does the password manager accidentally leave plaintext copies of the password lying around memory? Al...

Updated poppler packages fix security vulnerability

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo. CVE-2018-18897 XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of...

openSUSE: Security Advisory for kernel (openSUSE-SU-2019:0203-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the __memmove_avx_unaligned_erms function in the library, which is used by system calls and core glibc functions, allows a attacker to cause a crash in the application’s behavior.

The vulnerability of the memmoveavxunalignederms function sysdeps/x8664/multiarch/memmove-vec-unaligned-erms.S in the library, which handles system calls and core functions of glibc, is related to resource leak errors. Exploiting this vulnerability can allow an attacker to cause errors in...