OPENSUSE-SU-2019:2464-1 Recommended update for MozillaThunderbird

This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed bsc1154738: CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB bsc1154738. CVE-2019-11758:...

Recommended update for MozillaThunderbird (important)

openSUSE Security Update: Recommended update for MozillaThunderbird Announcement ID: openSUSE-SU-2019:2464-1 Rating: important References: 1149126 1149429 1151186 1152778 1153879 1154738 Cross-References: CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762...

Description of Office 2010 Language Pack SP2

Description of Office 2010 Language Pack SP2 Introduction Microsoft Office 2010 Language Pack Service Pack 2 SP2 provides the latest updates for Office 2010 Language Pack. Additionally, this service pack includes two kinds of fixes: Previously unreleased fixes that were created specifically for...

Taking Reputation to Scale: The Delicate Balance of Latency, Scale, and Cost (Part 1)

When it comes to serving reputation, even a millisecond of latency could create havoc, resulting in the unwanted spread of malware and causing costly consequences that no security company or customer wants. And that’s why we, as engineers here at Carbon Black, are constantly working towards...

Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product

Summary DB2 contains several vulnerabilities which can affect the IBM Performance Management product. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details CVEID: CVE-2019-4057 DESCRIPTION: IBM DB2 for Linux, UNIX and...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Monitoring. IBM Monitoring has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2422 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE Libraries compone...

Moderate: Red Hat Security Advisory: libqb security and bug fix update

An update for libqb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

Honeywell equIP Series, Performance Series IP Cameras and Recorders Authentication Bypass Vulnerability

Honeywell equIP and so on are the products of the American Honeywell Honeywell company.Honeywell equIP is an equIP series IP camera products.Honeywell Performance is a Performance series IP camera products.Honeywell Honeywell equIP is an equIP series IP camera. Honeywell Performance is a...

Dr. Memory - Memory Debugger For Windows, Linux, Mac, And Android

Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow, accesses to freed memory, double frees, memory leak...

CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

CVE-2019-18226

CVE-2019-18226 affects Honeywell equIP series and Performance series IP cameras and Recorders. The root cause is an authentication bypass via capture-replay, retained for legacy compatibility, enabling unauthenticated access and potential playback attacks (per CVSS v3 base 7.5). Public disclosure...

CVE-2019-18230

The CVE-2019-18230 entry affects Honeywell equIP and Performance series IP cameras. Root cause: Missing Authentication for Critical Function (CWE-306) leading to unauthenticated access to audio streams over HTTP. Affected products/versions are Honeywell equIP and Performance series cameras; CVSS ...

CVE-2019-18230: Missing Authentication for Critical Function

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

PT-2019-15288

Name of the Vulnerable Software and Affected Versions Honeywell equIP series and Performance series IP cameras and recorders affected versions not specified Description A potential replay attack vulnerability exists due to a weak authentication method being retained for compatibility with legacy...

CVE-2019-18226: Authentication Bypass by Capture-replay

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability

Honeywell equIP H4L2GR1 and so on are an IP camera from Honeywell USA. An access control error vulnerability exists in the Honeywell equIP Series and Performance Series IP cameras, which can be exploited by an attacker to gain unauthorized access...

PT-2019-15292

Name of the Vulnerable Software and Affected Versions Honeywell equIP and Performance series IP cameras affected versions not specified Description A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP. Recommendations At the moment, there is...

Low: Red Hat Enhancement Advisory: glusterfs bug fix and enhancement update

Updated glusterfs packages that fix several bugs and add various enhancements are now available. Red Hat Gluster Storage is software only scale-out storage solution that provides flexible and affordable unstructured data storage. It unifies data storage and infrastructure, increases performance,...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...