3208 matches found
CVE-2019-17503
CVE-2019-17503 affects Kirona Dynamic Resource Scheduler (DRS) 5.5.3.5. An unauthenticated user can directly access /osm/REGISTER.cmd (/osm_tiles/REGISTER.cmd), which contains SQL queries that disclose database information (version, table names, column names, etc.). Multiple sources (NVD, Red Hat...
Qualys Cloud Platform 8.21.2 New Features
The upcoming release of the Qualys Cloud Platform VM, PC, version 8.21.2, includes several new features in Qualys Cloud Platform and support for multiple technologies in Qualys Policy Compliance. The 8.21.2 release is scheduled to go live on 16th Sept, 2019. See full 8.21.2 new features blog post...
Patch Management 1.3 New Features
This release of Qualys Patch Management version 1.3 includes new features, highlights as follows. Patch Scheduling enhancement: "No Patch Window" – When scheduling a patch deployment, instead of having to specify a Patch Window time frame, you can select "None". This will allow a job to continue ...
RSVPMaker SQL Injection Vulnerability
RSVPMaker is a WordPress event scheduling and RSVP tracking plugin. A SQL injection vulnerability exists in RSVPMaker versions prior to 6.2. An attacker can exploit this vulnerability to obtain sensitive database information...
August 17, 2019—KB4512534 (OS Build 17763.720)
None None...
jenkins: Arbitrary file write vulnerability using file parameter definitions (SECURITY-1424)
A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary fil...
kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service
The CFS Linux kernel scheduler mishandles handling of leaf cfsrq's in the kernel/sched/fair.c code, which allows a local unprivileged attacker to cause a denial of service DoS by entering an infinite loop in updateblockedaverages function by inducing a high load on a system. Due to the nature of...
Starbucks: China – Limited Partner PII Regarding Work Scheduling via Unauthenticated API Endpoint
0xpatrik discovered an unauthenticated API endpoint that allowed retrieval of specified work leave dates of designated Starbucks employees in China. @0xpatrik — thank you for reporting the original vulnerability and for confirming the resolution...
[SECURITY] Fedora 29 Update: slurm-18.08.8-1.fc29
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
[SECURITY] Fedora 30 Update: slurm-18.08.8-1.fc30
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
Fedora Update for slurm FEDORA-2019-4ca3a39825
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The vulnerability of the DBconn::GetLastError function in the pgagent scheduling software, which allows a hacker to cause a service failure.
The vulnerability of the DBconn::GetLastError function in the pgagent scheduling software from the pgagent package is related to errors during the swapping of the zero pointer 0x0000000000407209. Exploiting this vulnerability could allow an attacker to trigger a service failure through a speciall...
July 16, 2019—KB4507466 (OS Build 17134.915)
None None...
SUSE-SU-2019:1389-2 Security update for cronie
This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...
June 26, 2019—KB4509479 (OS Build 17763.593)
None None...
June 18, 2019 — KB4502563 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1803
None None...
June 18, 2019 — KB4502562 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709
None None...
June 18, 2019 — KB4502560 Cumulative Update for .NET Framework 4.8 for Windows 10 version 1607 and Windows Server 2016
None None...
CVE-2019-10324
A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseActiondoSubmit, GradleReleaseApiActiondoStaging, MavenReleaseApiActiondoStaging, and UnifiedPromoteBuildActiondoSubmit allowed attackers to schedule a release build, perform release staging for...