CVE-2019-12944

Technical details about CVE-2019-12944 are not publicly available in the provided documents. Monitor for updates.

IoT: a malware story

Since 2008, cyber-criminals have been creating malware to attack IoT-devices, such as routers and other types of network equipment. You will find a lot of statistics on this on Securelist, most notably, here and here. The main problem with these IoT/embedded devices is that one simply cannot...

SLUB Event Registration Extension CVE-2019-16700 Arbitrary File Upload Vulnerability

Description SLUB Event Registration Extension is prone to an arbitrary-file-upload vulnerability. A remote attacker can leverage this issue to execute arbitrary code within the context of the application, upload arbitrary code and execute it and execute arbitrary script code in the browser of an...

Oracle MySQL Server CVE-2019-2948 Remote Security Vulnerability

Description Oracle MySQL Server is prone to a remote security vulnerability in 'Server: Optimizer' component. The vulnerability can be exploited over the 'MySQL' protocol. This vulnerability affects the following supported versions: 5.7.26 and prior, 8.0.16 and prior Technologies Affected Oracle...

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:1299-2)

This update for ffmpeg fixes the following issues : Security issue fixed : CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS bsc1101889 CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a D...

Oracle Java SE/Java SE Embedded CVE-2019-2973 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'JAXP' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13; Java S...

Oracle Outside In Technology Multiple Remote Security Vulnerabilities

Description Oracle Business Intelligence Enterprise Edition is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Outside In Filters' component is affected. These vulnerabilities affect the following supported versions: 8.5.4...

Fedora 29 : golang (2019-e99c1603c3)

Security fix for CVE-2019-16276 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Oracle Java SE CVE-2019-2999 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over Multiple protocols. This issue affects the 'Javadoc' component. This vulnerability affects the following supported versions: Java SE: 7u231, 8u221, 11.0.4, 13 Technologies Affected Orac...

Monero: Exploiting Network and Timing Side-Channels to Break Monero Receiver Anonymity

Summary: We present various examples of side-channel leakage in the communication between a Monero wallet and P2P node. Communication patterns and timing leak whether the wallet is the payee of a transaction that is sent into the transaction pool or mined in a block—thereby breaking transaction...

Data in the dark: Data protection

Hyperconnectivity is on the rise and, as a result, corporations' capacity to protect their own and their customers' data becomes more and more limited. Connection takes place over a network, so, as connection increases, that network increases in size...

Fedora 29 : krb5 (2019-dc4e1d0fb6)

Fix KDC crash when logging PKINIT enctypes CVE-2019-14844 This is a purely denial-of-service issue, though it is unauthenticated, and is unlikely to trigger by accident. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC IT UADM All versions V1.3. An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security...

Debian DLA-1951-1 : libtomcrypt security update

It was discovered that there was a denial of service vulnerability in the libtomcrypt cryptographic library. An out-of-bounds read and crash could occur via carefully-crafted 'DER' encoded data eg. by importing an X.509 certificate. For Debian 8 'Jessie', this issue has been fixed in libtomcrypt...

CVE-2017-5483

Multiple out of bounds read and integer overflow vulnerabilities were found in tcpdump affecting the decoding of various protocols. An attacker could create a crafted pcap file or send specially crafted packets to the network segment where tcpdump is running in live capture mode without -w which...

Exploit for Incorrect Default Permissions in Kramerav Viaware

Exploit Title: KRAMER VIAware 2.5.0719.1034 - Remote Code Exec...

Juniper Junos CVE-2019-0075 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D25...

CVE-2016-7141

It was found that the libcurl library using the NSS Network Security Services library as TLS/SSL backend incorrectly re-used client certificates for subsequent TLS connections in certain cases. An attacker could potentially use this flaw to hijack the authentication of the connection by leveragin...

SAP BusinessObjects Business Intelligence Platform Multiple Cross Site Scripting Vulnerabilities

Description SAP BusinessObjects Business Intelligence Platform is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Remote attackers can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)

Summary IBM QRadar Network Security is affected by Linux kernel vulnerabilities Vulnerability Details CVEID: CVE-2019-11479 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a flaw when processing minimum segment size MSS. By sending specially-crafted MSS traffic, a remote...