Cisco Identity Services Engine CVE-2019-15255 Authorization Bypass Vulnerability

Description Cisco Identity Services Engine is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. This issue being tracked by Cisco Bug ID CSCvq67348...

SUSE SLED12 / SLES12 Security Update : openssl-1_0_0 (SUSE-SU-2020:0028-1)

This update for openssl-100 fixes the following issues : Security issue fixed : CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Note that Tenable Network Security has extracted the preceding description block...

Automated Attacks Call for Automated Protection – 2020 Trend #3

In our blog series on security trends, we’ve been diving deeper into the five security predictions for 2020 made by our CTO Kunal Anand during his fireside chat with Imperva CMO David Gee. Watch it here. As I'll discuss in my upcoming blog on defense-in-depth and reducing risk, being “connected”...

CVE-2019-18792

CVE-2019-18792 affects Suricata 5.0.0, enabling evasion of TCP-based signatures by overlapping a TCP segment with a fake FIN packet, causing the PUSH ACK carrying data to be ignored. The fake FIN packet is accepted (ACK not set) while the legitimate packet is dropped due to overlap; affected Linu...

Fedora 30 : htmldoc (2019-e039dfaa30)

Update to latest release and include fix for CVE-2019-19630 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 31 : htmldoc (2019-e90a7032f2)

Update to latest release and include fix for CVE-2019-19630 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 30 : heimdal (2019-2fa7d6405b)

Security fix for CVE-2019-12098 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : cyrus-imapd (2019-ad23a4522d)

Update to new upstream version 3.0.13, which includes a fix for CVE-2019-19783 and other minor fixes. Release notes: https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.13.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 30 : python38 (2019-980f55cdd5)

This is Python 3.8.1, the first maintenance release of Python 3.8. It contains security fixes as well as bugfixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and form...

Fedora 30 : drupal7-webform (2019-6abe00cae1)

https://www.drupal.org/project/webform/releases/7.x-4.21 - https://www.drupal.org/sa-contrib-2019-096 - https://www.drupal.org/project/webform/releases/7.x-4.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable...

Fedora 31 : wordpress (2019-e16ba9e54e)

WordPress 5.3.2 Maintenance Release Shortly after WordPress 5.3.1 was released, a couple of high severity Trac tickets were opened. The Core team scheduled this quick maintenance release to resolve these issues. Main issues addressed in 5.3.2 : - Date/Time: Ensure that getfeedbuilddate correctly...

How to Secure Your Wi-Fi Router and Protect Your Home Network

Router security has improved a bunch in recent years, but there are still steps you can take to lock yours down even better...

EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-1024)

According to the version of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as...

EulerOS 2.0 SP8 : flatpak (EulerOS-SA-2020-1004)

According to the version of the flatpak packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address...

Photon OS 2.0: Python3 PHSA-2019-2.0-0187

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Secure New Internet-Connected Devices

During the holidays, internet-connected devices—also known as Internet of Things IoT devices—are popular gifts. These include smart cameras, smart TVs, watches, toys, phones, and tablets. Although this technology provides added convenience to our lives, it often requires that we share personal an...

CVE-2019-17006

In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...

UBUNTU-CVE-2019-17006

In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow...

CVE-2018-1682

CVE-2018-1682 affects IBM Watson Studio Local 1.2.3 and corresponds to an information disclosure vulnerability that can leak sensitive information over the network. The CVSS data indicates a network attack with low complexity and no authentication, with a CONFIDENTIALITY impact of LOW and no inte...

Debian DLA-2048-1 : libxml2 security update

It was discovered that there was a potential denial of service vulnerability in libxml2, the GNOME XML parsing library. For Debian 8 'Jessie', this issue has been fixed in libxml2 version 2.9.1+dfsg1-5+deb8u8. We recommend that you upgrade your libxml2 packages. NOTE: Tenable Network Security has...