Churning Out Machine Learning Models: Handling Changes in Model Predictions

Introduction Machine learning ML is playing an increasingly important role in cyber security. Here at FireEye, we employ ML for a variety of tasks such as: antivirus, malicious PowerShell detection, and correlating threat actor behavior. While many people think that a data scientist’s job is...

Open-Xchange AppSuite 7.10.1 Information Disclosure / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 61771 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.10.1 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed Version: 7.6.3-rev44,...

Not just for Processing: How Kafka Streams as a Distributed Database Boosted our Reliability and Reduced Maintenance

The Apache Kafka Streams library is used by enterprises around the world to perform distributed stream processing on top of Apache Kafka. One aspect of this framework that is less talked about is its ability to store local state, derived from stream processing. In this blog post we describe how w...

Product update: Virtuozzo 7.0 Update 9 Hotfix 2 (7.0.9-547)

The Hotfix 2 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-91577 Migration of a container from a Virtuozzo 7 Update 8 host to a Virtuozzo 7 Update 9 host initiated from Virtuozzo Automator could lead to a crash of vzmigrate. Vulnerability id: PSBM-9186...

States Need Way More Money to Fix Crumbling Voting Machines

“We are driving the same car in 2019 that we were driving in 2004, and the maintenance costs are mounting,” one South Carolina election official told researchers...

[SECURITY] Fedora 29 Update: netmask-2.4.4-1.fc29

This is a handy tool for generating terse netmasks in several common formats. If you've ever maintained a firewall with more than a few rules in it, you might use netmask to clean up and generalize sloppy rules left by the network administrator before you. It will also convert netmasks from one...

WordPress WP Maintenance Mode Plugin < 2.0.7 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution

devolo dLAN 550 duo+ Starter Kit - Remote Code Execution devolo dLAN 550 duo+ Starter Kit Remote Code Execution Vendor: devolo AG Product web page: https://www.devolo.com Affected version: dLAN 500 AV Wireless+ 3.1.0-1 i386 Summary: Devolo dLAN® 550 duo+ Starter Kit is Powerlineadapter which is a...

CVE-2019-7387

A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1TRUNK-20180914.bin devices. When the export function is called from system/maintenance/export.php, it accepts the path provided by the user, leading to path traversal via...

PT-2019-18572

Name of the Vulnerable Software and Affected Versions Systrome Cumilon devices versions 1.1-R2.1 TRUNK-20180914.bin Description A local file inclusion issue exists in the web interface. The export function, accessible from system/maintenance/export.php, allows path traversal via the name paramete...

CVE-2019-7387: Improper Limitation of a Pathname to a Restricted Directory

A local file inclusion vulnerability exists in the web interface of Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1TRUNK-20180914.bin devices. When the export function is called from system/maintenance/export.php, it accepts the path provided by the user, leading to path traversal via...

NetScaler ADC Firmware Release Cycle

NetScaler has announced the following updates to the ADC firmware release cycle. NetScaler ADC Firmware Release Cycle 7 yearwill fall on all versions starting with 14.1 and all subsequent releases. Year 1, Year 2, and Year 3 will have feature releases approximately every 8 weeks. Year 4, Year 5,...

App Layering/Unidesk: vSphere ESX hosts in Maintenance Mode can unpredictably fail tasks

Tasks for operations on ESX hosts and VMFS datastores fail with errors about hosts losing connection or objects being in the wrong state...

CVE-2018-19021

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service...

CVE-2018-19021

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service...

PT-2019-9714

Name of the Vulnerable Software and Affected Versions Emerson DeltaV DCS versions 11.3.1 through 14.3 Emerson DeltaV DCS versions R5.1 through R6 Emerson DeltaV DCS versions prior to R5.1 Description A specially crafted script could bypass the authentication of a maintenance port, which may allow...

CVE-2018-19021: Improper Restriction of Excessive Authentication Attempts

A specially crafted script could bypass the authentication of a maintenance port of Emerson DeltaV DCS Versions 11.3.1, 11.3.2, 12.3.1, 13.3.1, 14.3, R5.1, R6 and prior, which may allow an attacker to cause a denial of service...

Nodeaccess - Critical - Unsupported - SA-CONTRIB-2019-009

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466...

Expand collapse formatter - Critical - Unsupported - SA-CONTRIB-2019-011

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466...

Webform Table Element - Critical - Unsupported - SA-CONTRIB-2019-005

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466...