2627 matches found
CVE-2017-14955
CheckMK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report...
About the security content of tvOS 10.2.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
WordPress REST API Plugin Information Disclosure (CVE-2017-5487)
An information disclosure vulnerability exists in WordPress REST API Plugin. Successful exploitation could result in the disclosure of sensitive user information...
Ocean Cms V6.54 admin_datarelate.php parameter has SQL injection vulnerability
Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS V6.54 admindatarelate.php parameter SQL injection vulnerability exists, the vulnerability is due to the system failed to user-submitted parameters for effective filtering. An attacker can use this vulnerability to obtain...
CentOS 7 : authconfig (CESA-2017:2285)
An update for authconfig is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
authconfig security update
CentOS Errata and Security Advisory CESA-2017:2285 An update for authconfig is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Chengdu YiMi Network Technology Co., Ltd. YiMi software app has information leakage vulnerability
YiMi software app is a professional online car rental software, which can provide customers with chauffeured car, special car online car, errand, freight and other services. Chengdu YiMi Network Technology Co., Ltd YiMi software app has an information leakage vulnerability. The vulnerability is d...
Password Disclosure In Logs
Sentry is vulnerable to password disclosure. If there is an error on authenticated request, the user's username and password are printed to the logs. This is due to the version of Django is used...
Tracking Module
Overview The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked tes...
RHEL 7 : authconfig (RHSA-2017:2285)
An update for authconfig is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
OPENSUSE-SU-2017:1994-1 Security update for chromium
This update Chromium to version 60.0.3112.78 fixes security issue and bugs. The following security issues were fixed: CVE-2017-5091: Use after free in IndexedDB CVE-2017-5092: Use after free in PPAPI CVE-2017-5093: UI spoofing in Blink CVE-2017-5094: Type confusion in extensions CVE-2017-5095:...
Apple iTunes < 12.6.2 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes running on the remote host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An unauthenticated, remote attacker...
Apple iTunes < 12.6.2 Multiple Vulnerabilities (macOS) (credentialed check)
The version of Apple iTunes installed on the remote macOS or Mac OS X host is prior to 12.6.2. It is, therefore, affected by multiple vulnerabilities : - Multiple out-of-bounds read errors exist in the libxml2 component due to improper handling of specially crafted XML documents. An...
About the security content of iTunes 12.6.2 for Windows - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of watchOS 3.2.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of iCloud for Windows 6.2.2
About the security content of iCloud for Windows 6.2.2 This document describes the security content of iCloud for Windows 6.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of iOS 10.3.3
About the security content of iOS 10.3.3 This document describes the security content of iOS 10.3.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iTunes 12.6.2 for Windows
About the security content of iTunes 12.6.2 for Windows This document describes the security content of iTunes 12.6.2 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...
About the security content of watchOS 3.2.3
About the security content of watchOS 3.2.3 This document describes the security content of watchOS 3.2.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
FBI Releases Article on Privacy Risks Associated with Internet-Connected Children's Toys
The Federal Bureau of Investigation FBI has released an article on the privacy risks associated with Internet-connected children's toys. FBI warns that Internet-connected toys may contain "sensors, microphones, cameras, data storage components, and other multimedia capabilities - including speech...