12295 matches found
chromium-browser: Cross-origin size leak
Insufficient policy enforcement in performance APIs in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PeopleSoft Enterprise Performance Monitor Unauthorized Access
The vulnerability of the Performance Monitor sub-component of the PeopleSoft Enterprise component of the Oracle PeopleSoft Enterprise business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...
Tails 4.0 - Live System to Preserve Your Privacy and Anonymity
Tails is a live system that aims to preserve your privacy and anonymity. It helps you to use the Internet anonymously and circumvent censorship almost anywhere you go and on any computer but leaving no trace unless you ask it to explicitly. It is a complete operating system designed to be used fr...
[SECURITY] Fedora 31 Update: firefox-70.0-1.fc31
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 31 Update: firefox-69.0.3-1.fc31
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 31 Update: libnbd-1.0.3-1.fc31
NBD =EF=BF=BD=EF=BF=BD=EF=BF=BD Network Block Device =EF=BF=BD=EF=BF=BD=EF =BF=BD is a protocol for accessing Block Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and...
[SECURITY] Fedora 30 Update: firefox-70.0-1.fc30
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
SUSE SLED12 / SLES12 Security Update : accountsservice (SUSE-SU-2019:2778-1)
This update for accountsservice fixes the following issues : Security issue fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699. Non-security issue fixed: Improved wtmp io performance bsc1139487. Note that Tenable...
Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2018-1901)
Summary IBM WebSphere Application Server could allow a remote attacker to temporarily gain elevated privileges on the system, caused by incorrect cached value being used. Vulnerability Details CVEID: CVE-2018-1901 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to...
Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2018-1902)
Summary IBM WebSphere Application Server could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM Performance Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-1902 DESCRIPTION: IBM WebSphe...
Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4046)
Summary IBM WebSphere Application Server is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM Performance Management has addressed the applicable CVE. Vulnerability Details...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Monitoring. IBM Monitoring has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2684 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded...
SUSE-SU-2019:2778-1 Security update for accountsservice
This update for accountsservice fixes the following issues: Security issue fixed: - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699. Non-security issue fixed: - Improved wtmp io performance bsc1139487...
IBM DB2 High Performance Unload load for LUW Buffer Overflow Vulnerability
IBM DB2 is a relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions.High Performance Unload load for LUW is a DB2 utility program. The program can be used to unload DB2 tables fr...
CVE-2019-4523
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481...
CVE-2019-4523
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481...
Buffer overflow
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481...
CVE-2019-4523
CVE-2019-4523 affects IBM DB2 High Performance Unload load for LUW 6.1 and 6.5. Root cause: a buffer overflow due to improper bounds checking, enabling a local user to run code with root privileges. IBM bulletin shows fixes: Interim Fixes 6.1.0.3.6 (for 6.1) and 6.5.0.0.1 (for 6.5); follow remedi...
CVE-2019-4523: Buffer Copy without Checking Size of Input
IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481...
PT-2019-17118
Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload load for LUW versions 6.1 through 6.5 Description The issue is caused by improper bounds checking, leading to a buffer overflow. This could allow a local attacker to execute arbitrary code on the system with roo...