11010 matches found
[SECURITY] Fedora 31 Update: firefox-79.0-5.fc31
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight (CVE-2020-8840)
Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight CVE-2020-8840 Vulnerability Details CVEID: CVE-2020-8840 DESCRIPTION: An unspecified error with the lack of certain xbean-reflect/JNDI blocking in FasterXML jackson-databind has an unknown impact and...
Addressing the Video Quality and Performance Measurement Gap with Quality of Performance (QoP) Metrics
Ubiquity of Digital Video Means Meeting Viewers' Quality Expectations Digital video viewership is on an aggressive growth course. Globally, consumers will spend 84 minutes a day watching online video in 2020, up 25% from 2018i, and digital video viewership will increase from 35% in 2019 to more...
We Love Our Customers!
Here in the States, we often get our dry cleaning returned on hangers that say "We Love Our Customers." I once inadvertently brought one into the office back in the day, and our team displayed it prominently on a shelf, because it's true. Meeting with customers is the best part of my job here at...
OPENSUSE-SU-2020:1191-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-9327)
Summary In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations. Vulnerability Details CVEID: CVE-2020-9327 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a NULL pointer...
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-11655, CVE-2020-11656)
Summary SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled. Or the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belong...
Automate Compliance in the Well-Architected Framework
Explore how Edrans, a DevOps, IT, and software consultancy, is using Trend Micro Cloud One™ – Conformity to adhere to the Well-Architected Framework and boost customers’ security, performance, and compliance...
SUSE SLED15 / SLES15 Security Update : postgresql10 / postgresql12 (SUSE-SU-2020:2149-1)
This update for postgresql10 and postgresql12 fixes the following issues : postgresql10 was updated to 10.13 bsc1171924. https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 CVE-2020-1720, bsc1163985...
Denial Of Service (DoS)
python is vulnerable to denial of service DoS. The vulnerability exists as Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the...
Amplification Attacks
PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...
SUSE-SU-2020:2149-1 Security update for postgresql10 and postgresql12
This update for postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 bsc1171924. https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 CVE-2020-1720, bsc1163985 -...
SUSE-SU-2020:2143-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...
Afternoon Cyber Tea: Revisiting social engineering: The human threat to cybersecurity
Most of us know ‘Improv’ through film, theatre, music or even live comedy. It may surprise you to learn that the skills required for improvisational performance art, can also make you a good hacker? In cybersecurity, while quite a bit of focus is on the technology that our adversaries use, we mus...
Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight (CVE-2019-14892, CVE-2019-14893)
Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight CVE-2019-14892, CVE-2019-14893 Vulnerability Details CVEID: CVE-2019-14892 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an...
Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight
Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight Vulnerability Details CVEID: CVE-2020-9547 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by the mishandling of interaction between...
Security Bulletin: Apache Log4j valunarability found in Network Performance Insight (CVE-2019-17571)
Summary Apache Log4j vulnerability found in Network Performance Insight CVE-2019-17571. Vulnerability Details CVEID: CVE-2019-17571 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization of untrusted data in SocketServer...
RHEL 7 : qemu-kvm-rhev (RHSA-2020:3267)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3267 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...
