Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Vulnerability of ACE Mingyi's O&M Audit Risk Control System to overstepping of authority

DASUSM is an audit and risk control system based on the theory and practical experience of operation and maintenance security management, combined with the requirements of various laws and regulations e.g., level protection, SOX, PCI, enterprise internal control management, hierarchical protectio...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libcgroup Vulnerability (NS-SA-2019-0235)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libcgroup packages installed that are affected by a vulnerability: - libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information...

Information disclosure

An information disclosure flaw was found in the way the Java Virtual Machine JVM implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation in certain circumstances they had nonzero elements right after the allocation. A remote attacker cou...

CVE-2012-4420

CVE-2012-4420 affects the JVM implementation of Java SE 7 provided by OpenJDK 7, where integer arrays could be incorrectly initialized after memory allocation, allowing a remote attacker to disclose potentially sensitive information. The connected sources confirm this information disclosure in th...

Combining AI and Playbooks to Predict Cyberattacks

When organizations invest in AI, they are not only able to automate menial tasks like patching, but they can also create an automated system that looks for and discovers attacks, not only after the fact, but even before they occur. This predictive capability becomes increasingly necessary as...

mIRC URI Handler Remote Code Execution (CVE-2019-6453)

A remote code execution vulnerability exists in mIRC. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option. Successful exploitation could result in code execution on the target machine in the context of the application...

CVE-2019-5539

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

Design/Logic Flaw

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

CVE-2019-5539

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

Security Bulletin: Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package

Summary Multiple vulenerabilities CVE-2019-0205, CVE-2019-0210 in thrift package Vulnerability Details CVEID: CVE-2019-0205 DESCRIPTION: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue...

Deutsche Bahn Ticket Vending Machine Privilege Escalation

Document Title: =============== Deutsche Bahn Ticket Vending Machine Windows XP - Local Kiosk Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2191 Vulnerability Magazine:...

Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation

Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation Exploit Title: Deutsche Bahn Ticket Vending Machine Local Kiosk - Privilege Escalation Date: 2019-12-18 Exploit Author: Vulnerability-Lab Vendor Homepage:...

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

Design/Logic Flaw

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect...

Design/Logic Flaw

This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constructed to look like the enrolled user may authenticate via Face ID...

CVE-2019-8760

This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constructed to look like the enrolled user may authenticate via Face ID...

CVE-2019-8760

CVE-2019-8760 concerns Face ID authentication on Apple iOS. Description and multiple sources confirm that a 3D model constructed to resemble the enrolled user could bypass Face ID. The issue is addressed by improving Face ID machine learning models and was fixed in iOS 13. Related entries in Red ...

CVE-2019-8667

CVE-2019-8667 affects macOS Mojave components where Time Machine backup encryption status could be presented incorrectly due to an inconsistent user interface resolved by improved state management. The issue is documented as fixed in macOS Mojave 10.14.6. Public notes link the vulnerability to a ...