October 9, 2018—KB4462926 (Monthly Rollup)

None None...

October 9, 2018—KB4462918 (OS Build 16299.726)

None None...

October 9, 2018—KB4462919 (OS Build 17134.345)

None None...

CVE-2018-15368

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-15755: - CF networking internal policy server SQL injection | Cloud Foundry

Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using cf-networking-release versions prior to 2.16.0 Description Cloud Foundry CF-Networking, versions 2.11.0 through 2.15.0, contain an internal api endpoint vulnerable to SQL injection between...

The Facebook Security Meltdown Exposes Way More Sites Than Facebook

The social networking giant confirmed Friday that sites you use Facebook to login to could have been accessed as a result of its massive breach...

Fancy Bear’s VPNfilter malware is back with 7 new modules

By Waqas Cisco’s Talos researchers have identified that Russia’s VPNfilter is way more dangerous than it is believed to be. The malware, which prompted the FBI to urge people to reboot their internet routers, contains seven additional third-stage modules that are infecting countless global...

Moderate: Red Hat Security Advisory: openstack-neutron security and bug fix update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: openstack-neutron security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: qemu-kvm

Issue Overview: A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process...

September 11, 2018—KB4457135 (Monthly Rollup)

None None...

September 11, 2018—KB4457140 (Security-only update)

None None...

September 11, 2018—KB4457144 (Monthly Rollup)

None None...

September 11, 2018—KB4457145 (Security-only update)

None None...

September 11, 2018—KB4457984 (Security-only update)

None None...

Update Rollup 6 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 6 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for Virtual Machine Manager VMM: Server and Administrator...

CVE-2018-16310

Technicolor TG588V V2 devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-15907. NOTE: Technicolor denies that the described behavior is a vulnerability an...

CVE-2018-16310

The connected CNVD/NVD records corroborate a denial-of-service vulnerability affecting Technicolor TG588V V2 devices, caused by a flood of random MAC addresses (MAC flooding) that can overwhelm the device’s networking capabilities and cause outages. The details specify that remote attackers can t...

CVE-2018-16310

Technicolor TG588V V2 devices allow remote attackers to cause a denial of service networking outage via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-15907. NOTE: Technicolor denies that the described behavior is a vulnerability an...