12303 matches found
OPENSUSE-SU-2019:0167-1 Security update for spice
This update for spice fixes the following issues: Security issue fixed: - CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Non-security issue fixed: - Include spice-server tweak to compensate for performanc...
OPENSUSE-SU-2019:0161-1 Security update for java-11-openjdk
This update for java-11-openjdk to version 11.0.2+7 fixes the following issues: Security issues fixed: - CVE-2019-2422: Better FileChannel transfer performance bsc1122293 - CVE-2019-2426: Improve web server connections - CVE-2018-11212: Improve JPEG processing bsc1122299 - Better route routing -...
[SECURITY] Fedora 28 Update: tcpreplay-4.3.2-1.fc28
Tcpreplay is a tool to replay captured network traffic. Currently, tcpreplay supports pcap tcpdump and snoop capture formats. Also included, is tcpprep a tool to pre-process capture files to allow increased performance under certain conditions as well as capinfo which provides basic information...
SUSE-SU-2019:0716-1 Security update for openstack-cinder, openstack-horizon-plugin-designate-ui, openstack-neutron, openstack-neutron-lbaas
This update for openstack-cinder, openstack-horizon-plugin-designate-ui, openstack-neutron, openstack-neutron-lbaas fixes the following issues: Security vulnerabity fixed in openstack-cinder: - CVE-2017-15139: Fixed a leakage of sensitive information between tenants in certain storage volume...
[SECURITY] Fedora 29 Update: firefox-66.0-6.fc29
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Low: nvidia
Issue Overview: NVIDIA graphics driver contains a vulnerability that may allow access to application data processed on the GPU through a side channel exposed by the GPU performance counters. Local user access is required. This is not a network or remote attack vector. CVE-2018-6260 Affected...
SilkETW: Because Free Telemetry is … Free!
Over time people have had an on-again, off-again interest in Event Tracing for Windows ETW. ETW, first introduced in Windows 2000, is a lightweight Kernel level tracing facility that was originally intended for debugging, diagnostics and performance. Gradually, however, defenders realized that ET...
Who has the fastest website in F1?
I was trying to make my predictions for the new Formula One season by studying the aerodynamics of the cars, their cornering speeds, their ability to run with different amounts of fuel. Then it hit me: I have no idea what I'm doing. So, I'm going to make my predictions the only way I know how: By...
Who has the fastest website in F1?
I was trying to make my predictions for the new Formula One season by studying the aerodynamics of the cars, their cornering speeds, their ability to run with different amounts of fuel. Then it hit me: I have no idea what I'm doing. So, I'm going to make my predictions the only way I know how: By...
Arjun v1.3 - HTTP Parameter Discovery Suite
Features Multi-threading 4 modes of detection A typical scan takes 30 seconds Regex powered heuristic scanning Huge list of 25,980 parameter names Makes just 30-35 requests to the target Usage Note: Arjun doesn't work with python 3.4 Discover parameters To find GET parameters, you can simply do:...
Get, Set, Election, Go: Preparing For The 2019 Elections - Chapter Two
Chapter 2: Election Day Challenges and Opportunities for Digital News Publishers It will be all about optimizing for Scale, Performance, and Efficiency while maintaining their security posture ... If 2014 was anything to go by for us at Akamai supporting digital publishers, 2019 is going to be an...
Product update: Virtuozzo Infrastructure Platform 2.5 Update 4 (2.5.0-1614)
This update provides stability and usability fixes. Vulnerability id: VSTOR-14144, VSTOR-20526 Blink button in the admin panel was not working in some cases. Vulnerability id: VSTOR-20197 Unable to create network bonds. Vulnerability id: VSTOR-20232 Disk replacement occasionally does not allow to...
[SECURITY] Fedora 28 Update: firefox-65.0.2-1.fc28
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
. NET advanced code audit(third class)Fastjson deserialization vulnerability-vulnerability warning-the black bar safety net
In Java Fastjson ever broke the plurality of deserialization vulnerabilities and Bypass version, and in. Net field also has a Fastjson library 作者官宣这是一个读写Json效率最高的的.Net components, using the built-in method JSON. ToJSON can be quickly serialized. Net objects. Let you easily achieve. Net of all...
Ubuntu 18.04 LTS : NVIDIA graphics drivers vulnerability (USN-3904-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3904-1 advisory. It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the...
USN-3904-1: NVIDIA graphics drivers vulnerability
It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU...
USN-3904-1 nvidia-graphics-drivers-390 vulnerability
It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the application data processed on the GPU...
Intel CPU Spoiler vulnerability alerts-a vulnerability alert-the black bar safety net
Spoiler is the researchers found that the impact of the Intel microprocessor architecture of a speculative attack a speculative attack is a new microprocessor disclosure vulnerability that leaks is about the physical page to the user space process mapping of key information. Spoiler with 2018 1 o...
Global Traffic Management for Cloud, Data Centers, and CDNs
Twenty years ago it would be common to have multiple data centers load balanced with specialized devices. The applications in multiple data centers would use the Domain Name System DNS to look up the application destination. The DNS system would be set up to with multiple data center locations...