3344 matches found
Ubuntu 16.04 LTS : Linux kernel vulnerability (USN-4186-3)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4186-3 advisory. USN-4186-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was...
CVE-2019-2193
In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Admin app installed with no indication to the user, with User execution privileges needed. User...
DRUPAL-CONTRIB-2019-081
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read:...
CVE-2019-17666
A flaw was found in the Linux kernel's implementation of the RealTek wireless drivers WiFi-direct or WiFi peer-to-peer driver implementation. When the RealTek wireless networking hardware is configured to accept WiFi-Direct or WiFi P2P connections, an attacker within the wireless network...
Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise
A critical Linux bug has been discovered that could allow attackers to fully compromise vulnerable machines. A fix has been proposed but has not yet been incorporated into the Linux kernel. The flaw CVE-2019-17666, which was classified as critical in severity, exists in the “rtlwifi” driver, whic...
UBUNTU-CVE-2019-17669
WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters...
Comodo Forums Hack Exposes 245,000 Users' Data — Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately. Cybersecurity company Comodo has become one of the major victims of a recently disclosed vBulletin 0-day vulnerability, exposing login account...
CVE-2019-16992
The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation that an address at keybase.io can be used for Stellar payments to the user, which might be incompatible with a user's personal position on...
Design/Logic Flaw
The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation that an address at keybase.io can be used for Stellar payments to the user, which might be incompatible with a user's personal position on...
CVE-2019-16992
The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation that an address at keybase.io can be used for Stellar payments to the user, which might be incompatible with a user's personal position on...
CVE-2019-16658
TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...
Cross site request forgery (csrf)
TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...
CVE-2019-16658
TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...
CVE-2019-16658
TuziCMS 2.0.6 is affected by a CSRF vulnerability in the endpoint index.php/manage/notice/do_add . The provided documents identify the root cause as a CSRF issue at that endpoint. No exploitation specifics or remediation steps are given in the sources. If present, check for interim mitigations; o...
CVE-2019-16658: Cross-Site Request Forgery (CSRF)
TuziCMS 2.0.6 has index.php/manage/notice/doadd CSRF...
PT-2019-14743
Name of the Vulnerable Software and Affected Versions TuziCMS version 2.0.6 Description The issue concerns a CSRF vulnerability in the index.php/manage/notice/do add endpoint. This allows for potential unauthorized actions. Recommendations For TuziCMS version 2.0.6, consider implementing proper...
CVE-2019-15779
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...
PT-2019-14388
Name of the Vulnerable Software and Affected Versions insta-gallery plugin versions prior to 2.4.8 Description The issue concerns the lack of nonce validation for certain actions. Specifically, it affects the qligg dismiss notice and qligg form item delete actions, which can be exploited due to t...
NewStart CGSL CORE 5.04 / MAIN 5.04 : libXcursor Vulnerability (NS-SA-2019-0048)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libXcursor packages installed that are affected by a vulnerability: - XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a...