Fedora 31 : elog (2020-f49fe7f011)

Security fix for CVE-2019-3993, CVE-2019-3994, CVE-2019-3995, CVE-2019-3992, CVE-2019-3996 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 30 : 1:transfig / xfig (2020-6a2824178e)

Security fix for CVE-2019-19746, CVE-2019-19797 - New upstream release 3.2.7b - Add patch fixing CVE-2019-19746 rhbz1787040 - Add patch fixing CVE-2019-19797 rhbz1786726 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 30 : elog (2020-9f8bc040c8)

Security fix for CVE-2019-3993, CVE-2019-3994, CVE-2019-3995, CVE-2019-3992, CVE-2019-3996 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Debian DLA-2076-1 : slirp security update

An issue has been found in slirp, a SLIP/PPP emulator using a dial up shell account. Due to bad memory handling in slirp a heap-based buffer overflow or other out-of-bounds access could happen, which can lead to a DoS or potential execute arbitrary code. For Debian 8 'Jessie', this problem has be...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X, the affected products utilize a weak encryption scheme for remote desktop control, which may allow an...

CVE-2020-6966

CVE-2020-6966 concerns GE Healthcare CARESCAPE/CIC/CSCS/ApexPro telemetry systems that use a weak encryption scheme for remote desktop control, enabling remote code execution on affected devices. The GE GEHC advisory (ICSMA-20-023-01) lists affected products: ApexPro Telemetry Server (4.2 and pri...

CVE-2020-6964

The CVE-2020-6964 entry corresponds to GE Healthcare vulnerabilities affecting CARESCAPE Telemetry Server, ApexPro Telemetry Server, CIC, and CSCS (and related monitor endpoints) where the integrated service for keyboard switching could allow attackers to obtain remote keyboard input access witho...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://th...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2020:0132-1)

This update for Mesa fixes the following issues : Security issue fixed : CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Fedora 30 : chromium (2020-4355ea258e)

Update to 79.0.3945.117. Fixes CVE-2020-6377. ---- Security fix for CVE-2019-13767. ---- Update to Chromium 79. Fixes the usual giant pile of bugs and security issues. This time, the list is : CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13728 CVE-2019-13729 CVE-2019-13730 CVE-2019-13732...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:0140-1)

This update for java-11-openjdk fixes the following issues : Update to version jdk-11.0.6-10 January 2020 CPU, bsc1160968 Fixing these security related issues : CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2020-2590: Improve Kerberos interop capabilities CVE-2020-2593: Normalize normalization...

Fedora 31 : 1:rubygem-rack (2020-57fc0d0156)

Update to Rack 2.0.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Bluewall - A Firewall Framework Designed For Offensive And Defensive Cyber Professionals

Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features Bluewall...

Photon OS 3.0: Ruby PHSA-2020-3.0-0047

An update of the ruby package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0047. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133068;...

Threatpost Poll: Are Published PoC Exploits a Good or Bad Idea?

The practice of disclosing proof-of-concept PoC exploits has long caused a debate in the security community. As the name suggests, these outline steps used to exploit a vulnerability in a system to show how it can be done — and are used to test networks and pinpoint vulnerable aspects of a system...

Fedora 31 : 1:ImageMagick / rubygem-rmagick (2020-f006145643)

Security and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 31 : gnulib (2020-663f619e9c)

Security fix for CVE-2018-17942 - Update on 2020-01-07 - CVE-2018-17942 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 31 : kernel (2020-7fcf62839f)

Update to Linux v5.4.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Cisco FTD Multiple Vulnerabilities (cisco-sa-20180418-asa1 / cisco-sa-20180418-asa2 / cisco-sa-20180418-asa3 / cisco-sa-20180418-asaanyconnect / cisco-sa-20180418-asa_inspect)

According to its self-reported version the Cisco Firepower Threat Defense FTD software running on the remote device is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisories for more information. Note that Nessus has not tested for this issue but ha...