Incorrect Ownership Assignment

github.com/snapcore/snapd assigns incorrect ownership to system resources. The ownership of a snap container is set using the uid and gid of the user who first invokes snap-confine. This leads to a vulnerability where the user is granted unauthorized access to modify the private or tmp directory...

The vulnerability of Systemd demons, related to the simultaneous use of shared resources and synchronization errors, allows a perpetrator to trigger a service failure.

The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the nginx web server module in Phusion Passenger, related to the simultaneous use of shared resources and synchronization errors, allows attackers to gain access to confidential data.

The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A attacker is able to cause the process to crash after consuming a large amount of system resources using a malicious Cineon image with an incorrect claimed image size. The cineon. The vulnerability occurs in ReadCINImage in coders/cin.c due to a la...

Authentication Bypass

github.com/snapcore/snapweb is vulnerable to authentication bypass. The identity of the user and the origin of a connection is not verified before allowing controls to install or remove snap packages. An unauthenticated remote attacker is able to add a malicious snap package from the store and us...

Information leakage vulnerability in FESCO's HR sharing service platform

Beijing Foreign Enterprise Human Resource Service Co., Ltd. is a company that provides human resource services to foreign representative offices in China, foreign financial institutions and economic organizations. An information leakage vulnerability exists in the FESCO human resources sharing...

CVE-2016-1587

The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store,...

Information disclosure

The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store,...

Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Service Vulnerability

A vulnerability in the XML API of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to cause the CPU to increase to 100% utilization, causing a denial of service DoS condition on an affected system. The vulnerability is due...

Wireshark 3.0.1 Security Updates (Apr 2019) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Wireshark 3.0.1 Security Updates (Apr 2019) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Linux kernel competitive conditions issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The kernel contains a Competitive Condition Problem vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually...

Dallas Start-Ups (submission extended): Pitch Us Your Ideas for a Smarter Connected World

updated April 22, 2019 At Trend Micro we’ve spent the past three decades successfully solving problems for our customers. It’s helped us to become a leading provider of services to secure the connected world. But we’re not done there. We also want to find and learn from the technology innovators...

CVE-2019-4080

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...

Xxe

IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239...

Design/Logic Flaw

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...

CVE-2019-4080

IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380...

CVE-2019-4043

IBM Sterling B2B Integrator (Standard Edition) vulnerable to XML External Entity (XXE) injection under CVE-2019-4043. Affected: versions 5.2.0 snf 6.0.0.0 and 6.0.0.0. Impact per IBM: potential disclosure of sensitive data or memory resource consumption. Remediation from IBM bulletin: upgrade to ...

EulerOS 2.0 SP5 : libexif (EulerOS-SA-2019-1141)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...

EulerOS 2.0 SP2 : libexif (EulerOS-SA-2019-1116)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows...