4702 matches found
(RHSA-2020:2331) Low: Red Hat Satellite Proxy 5 - End Of Life Notice
After May 31, 2020, as per the life-cycle support policy for Red Hat Satellite Proxy, Red Hat will discontinue technical support services as well as software maintenance services for all Red Hat Satellite and Proxy versions 5.8 or older on Red Hat Enterprise Linux 6. The listed versions will exit...
Facebook Proxygen Resource Management Error Vulnerability
Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A resource management error vulnerability exists in the lifecycle management of the request adaptor in versions prior to Facebook Proxygen v2020.05.18.00. An attacker can exploit this vulnerability...
Building for Billions: Addressing Security Concerns for Platforms at Scale
Security operations once consisted of a multitude of manual operations based around alerts, thresholds and severity levels. As systems scale and platforms continue to grow, how do you keep up with the growing requirements to secure these transactions and the networks they are built upon?...
Critical GitLab Flaw Earns Bounty Hunter $20K
A critical GitLab vulnerability, which could be leveraged by a remote attacker to execute code, recently netted a researcher a $20,000 bug-bounty award. The flaw was reported to GitLab by software developer William Bowling via the HackerOne bug bounty platform on March 23. It was then disclosed...
The vulnerability of Google Chrome relates to improper control of resources throughout their lifecycle. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome relates to improper control over the resource throughout its lifecycle. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise their integrity, and cause service failures...
The vulnerability of Google Chrome’s high-performance rendering system, SwiftShader, relates to reading data beyond the buffer in memory, allowing attackers to access confidential data.
The vulnerability of Google Chrome’s high-performance rendering system, SwiftShader, is related to object lifecycle errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
tomcat: local privilege escalation
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...
tomcat: local privilege escalation
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...
Oracle Supply Chain Products Suite Agile PLM Unauthorized Access Vulnerability
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle USA. The product provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM Product Lifecycle Management is one of the product lifecycle management components. A security...
EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2020-1438)
According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections ...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) ( CVE-2019-4441)
Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2019-4720)
Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in t...
Unspecified Vulnerability in codeBeamer
Intland Software codeBeamer ALM is an application lifecycle management platform from Intland Software, Germany. The platform supports application lifecycle management, requirements management, risk management and software development. A security vulnerability exists in codeBeamer versions prior t...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affects IBM Agile Lifecycle Manager
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Agile Lifecycle Manager. IBM Agile Lifecycle Manager has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an...
Security Bulletin: IBM Agile Lifecycle Manager is affected by an Apache Zookeeper vulnerability (CVE-2019-0201)
Summary IBM Agile Lifecycle Manager 2.1 has addressed the following vulnerability in Apache ZooKeeper. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL...
CVE-2019-19913
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...
Debian DLA-2155-1 : tomcat8 security update
Tomcat8 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacke...
Windows 7 is EOL: What next?
End-of-life EOL is an expression commonly used by software vendors to indicate that a product or version of a product has reached the end of usefulness in the eyes of the vendor. Many companies, including Microsoft, announce the EOL dates for their products far in advance. Every Windows product h...
[SECURITY] [DLA 2155-1] tomcat8 security update
Package : tomcat8 Version : 8.0.14-1+deb8u16 CVE ID : CVE-2019-12418 Tomcat8 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture...
tomcat: local privilege escalation
A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...