PT-2019-3948

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux WSL affected versions not specified Description The issue is caused by a race condition in the Windows Subsystem for Linux, leading to an elevation of privilege. This could allow an attacker to elevate their...

PT-2019-3858

Name of the Vulnerable Software and Affected Versions Windows Data Sharing Service affected versions not specified Description The issue is related to errors in file processing within the Windows Data Sharing Service of the Windows operating system. It allows an attacker to potentially elevate...

PT-2019-3883

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows Graphics component of the Windows operating system. It allows an attacker to potentially gain unauthorized access to...

Signature validation bypass in XmlSecLibs

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

DEBIAN-CVE-2019-3465

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

CVE-2019-3465

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

CVE-2019-3465

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message...

CVE-2019-3465

CVE-2019-3465 affects Rob Richards XmlSecLibs (all versions before 3.0.3) used by SimpleSAMLphp, where XML signature validation is incorrect. An authenticated attacker can impersonate others or elevate privileges via crafted XML messages. The issue is mitigated by upgrading XmlSecLibs to v3.0.3 o...

Cisco Webex Meetings Privilege Permission and Access Control Issues Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A privilege-granting and access-control issue vulnerability exists in the Webex Network Recording Admin page in Cisco Webex Meetings versions prior to 39.7.0, which can be exploited by a remote attacker to elevate...

OPENSUSE-SU-2019:2447-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87: boo1155643,boo1154806,boo1153660, boo1151229,boo1149143,boo1145242,boo1143492 Security issues fixed with this version update: CVE-2019-13721: Use-after-free in PDFium CVE-2019-13720: Use-after-free in audio...

PT-2019-4323

Name of the Vulnerable Software and Affected Versions Cisco RV320 and Cisco RV325 affected versions not specified Description The issue is related to the presence of a hardcoded X.509 certificate key pair and a static Secure Shell SSH host key in the firmware of the affected devices. This could...

PT-2019-4426

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, and RV082 versions affected versions not specified Description The issue is related to the presence of embedded authentication credentials, specifically a static X.509 certificate, in the firmware of...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:2447-1 Rating: important References: 1143492 1144625 1145242 1146219 1149143 1150425 1151229 1153660 1154806 1155643 Cross-References: CVE-2019-13659 CVE-2019-13660 CVE-2019-13661 CVE-2019-13662 CVE-2019-1366...

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

CVE-2019-16284

CVE-2019-16284 concerns a BIOS/firmware vulnerability in HP products where the EFI_BOOT_SERVICES structure can be overwritten to execute arbitrary SMM code, potentially leading to privilege escalation during boot. The Red Hat and NVD entries align with HP’s advisory (HP: C06456250), describing af...

CVE-2019-16284

A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code during boot services that can result in elevation of privilege. The EFIBOOTSERVICES structure might be overwritten by an attacker to execute arbitrary SM...

CVE-2019-18631

The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 18.8, 3.5.2 18.11, and 3.6.0 19.6 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows attackers...

CVE-2019-18631

The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 18.8, 3.5.2 18.11, and 3.6.0 19.6 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows attackers...

CVE-2019-18631

CVE-2019-18631 affects the Windows component of Centrify Authentication and Privilege Elevation Services (versions 3.4.0–3.6.0). The flaw is an unspecified exception handling issue when using partially trusted assemblies to serialize input data, allowing an attacker to run arbitrary code inside t...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 & 8 and IBM® Runtime Environment Java™ Version 7 & 8 used by Rational Business Developer. Rational Business Developer has addressed the applicable CVEs. These issues were disclosed as part of the IBM Java S...