3297 matches found
Revisiting Software Vulnerabilities in the Boeing 787
I previously blogged about a Black Hat talk that disclosed security vulnerabilities in the Boeing 787 software. Ben Rothke concludes that the vulnerabilities are real, but not practical...
SUSE-SU-2019:2348-1 Security update for ghostscript
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file bsc1144621...
SUSE-SU-2019:2346-1 Security update for podman
This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. bsc1144065...
CVE-2019-16168 vulnerabilities
Vulnerabilities for packages: mysql...
OPENSUSE-SU-2019:1985-1 Recommended update for putty
This update for putty fixes the following issues: Update to new upstream release 0.72 boo1144547, boo1144548 Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Fixed a vulnerability in all the SSH client tools PuTTY, Plink, PSFTP and...
OPENSUSE-SU-2019:1903-1 Security update for chromium
This update for chromium to verion 76.0.3809.100 fixes the following issues: - CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction boo1145242 - CVE-2019-5867: Out-of-bounds read in V8 boo1145242...
OPENSUSE-SU-2019:1902-1 Security update for chromium
This update for chromium to verion 76.0.3809.100 fixes the following issues: - CVE-2019-5868: Use-after-free in PDFium ExecuteFieldAction boo1145242 - CVE-2019-5867: Out-of-bounds read in V8 boo1145242...
OPENSUSE-SU-2019:1883-1 Security update for libsass
This update for libsass to version 3.6.1 fixes the following issues: Security issues fixed: - CVE-2019-6283: Fixed heap-buffer-overflow in Sass::Prelexer::parenthesescopechar const boo1121943. - CVE-2019-6284: Fixed heap-based buffer over-read exists in Sass:Prelexer:alternatives boo1121944. -...
CVE-2019-1925
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist because the affected software improperly validates Advanced...
SUSE-SU-2019:2087-1 Security update for tcpdump
This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2019-1010220: Fixed a buffer over-read in printprefix which may expose data bsc1142439. - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoeprint and lookupemem bsc1068716...
SUSE-SU-2019:2053-1 Security update for python3
This update for python3 fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. - CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document bsc1109847. - CVE-2018-1000802: Fixed a...
MailEnable vulnerability warning CVE-2019-12923~CVE-2019-12927-the vulnerability warning-the black bar safety net
Recently, the mail server MailEnable broke a set of vulnerabilities, the first time for tracking and analysis of early warning. The study found that, using the set of vulnerabilities that an attacker can achieve the user data CRUD, the file is read and a portion of the override operation...
CVE-2019-2785 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2746 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2738 vulnerabilities
Vulnerabilities for packages: mysql...
MGASA-2019-0193 Updated thunderbird packages fix security vulnerabilities
The updated thunderbird packages fix some bugs and security vulnerabilities: Heap buffer overflow in icalparser.c. CVE-2019-11703 Heap buffer overflow in icalvalue.c. CVE-2019-11704 Stack buffer overflow in icalrecur.c. CVE-2019-11705 Type confusion in icalproperty.c. CVE-2019-11706...
SUSE-SU-2019:1525-1 Security update for netpbm
This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack bsc1024288. - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster function bsc1024291. - create netpbm-vulnerable subpackage and move...
MGASA-2019-0155 Updated java-1.8.0-openjdk packages fix security vulnerability
The updated packages fix several bugs and some security issues: Font layout engine out of bounds access setCurrGlyphID. CVE-2019-2698 Slow conversion of BigDecimal to long. CVE-2019-2602 Incorrect skeleton selection in RMI registry server-side dispatch handling. CVE-2019-2684...
GHSA-943P-XC6M-C6GR Rejected CVE ID
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7576, CVE-2018-21233. Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2018-7576 and CVE-2018-21233 to determine which...