Fedora 28 : glusterfs (2018-e048a4ef13)

Security fix for CVE-2018-1088 Privilege escalation via glustersharedstorage when snapshot scheduling is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

CVE-2018-15333

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps...

CVE-2018-15333

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps...

CVE-2018-15333

CVE-2018-15333 affects F5 BIG-IP: unrestricted Snapshot File Access lets any user role (including Guest) access/download QKView/TCPDumps from the configuration utility on versions 11.2.1 and newer. The advisory lists fixes introduced in various branches: 16.x (16.0.0), 15.x (e.g., 15.1.0.5), 14.x...

CVE-2018-15333

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps...

CVE-2018-20184

In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA...

DEBIAN-CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

PT-2018-3483 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20181209 Q8 Description: The issue is related to a heap-based buffer overflow in the WriteTGAImage function, which can be exploited by attackers to cause a denial of service. This can be achieved by using ...

Failed to call RPC function 'Vss.FinishSnapshot'

Article Applicability The first part of the error document in this article, Failed to call RPC function , is common and occurs anytime an RPC function cannot be invoked. This article is specifically related to an issue where the VSS snapshot closes prematurely because the KeepSnapshot RPC calls...

Question mark in Veeam Explorer for Microsoft SQL Server meaning

Challenge In Veeam Explorer for SQL, some databases may be listed with a question mark. Despite the question mark and warning, some restore operations may still function. However, some restore details may not auto-populate due to the lack of metadata. Cause The question mark indicates that metada...

FLARE VM Update

FLARE VM is the first of its kind reverse engineering and malware analysis distribution on Windows platform. Since its introduction in July 2017, FLARE VM has been continuously trusted and used by many reverse engineers, malware analysts, and security researchers as their go-to environment for...

Security fix for the ALT Linux 9 package NetworkManager version 1.14.5-alt1.gitba83251bba87

Nov. 1, 2018 Mikhail Efremov 1.14.5-alt1.gitba83251bba87 - Upstream git snapshot nm-1-14 branch fixes: CVE-2018-15688...

openSUSE Security Update : haproxy (openSUSE-2018-1229)

This update for haproxy to version 1.8.14 fixes the following issues : These security issues were fixed : - CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an out-of-bounds read in hpackvalididx that resulted in a remote crash and denial of service bsc1108683 -...

Security update for haproxy (important)

This update for haproxy to version 1.8.14 fixes the following issues: These security issues were fixed: - CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an out-of-bounds read in hpackvalididx that resulted in a remote crash and denial of service bsc1108683 - CVE-2018-11469...

Trust Management Vulnerability in GSKit Component in IBM Spectrum Protect and Spectrum Protect Snapshot

IBM Spectrum Protect and Spectrum Protect Snapshot are both products of IBM Corporation, U.S.A. IBM Spectrum Protect is a suite of data protection platforms that provide organizations with a single point of control and management and support for backup and recovery of virtual, physical and cloud...

CVE-2018-3826

In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the snapshot API. When the accesskey and securitykey parameters are set using the snapshot API they can be exposed as plain text by users able to query the snapshot API...

CVE-2018-3826

In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the snapshot API. When the accesskey and securitykey parameters are set using the snapshot API they can be exposed as plain text by users able to query the snapshot API...

CVE-2017-15125

A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CS...

CVE-2017-15125

A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CS...

Cross site scripting

A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CS...