3782 matches found
HPESBNS03976 rev.1 - HPE NonStop using Sudo
Potential Security Impact: Local: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OSS Core Utilities T1202 T1202L02, T1202L02^AAN, T1202AAO, T1202L02^AAQ, T1202L02^AAR, T1202L01^AAJ, T1202J01, T1202J01^AAP, T1202H01^AAL CVSS Scores: | CVE | CVSS Vector...
Oracle Ties Previous All-Time Patch High with January Updates
Oracle has patched 334 vulnerabilities across all of its product families in its January 2020 quarterly Critical Patch Update CPU. Out of these, 43 are critical/severe flaws carrying CVSS scores of 9.1 and above. The CPU ties for Oracle’s previous all-time high for number of patches issued, in Ju...
Oil-and-Gas APT Pivots to U.S. Power Plants.
A known APT group with ties to the Iran-linked APT33, dubbed Magnallium, has expanded its targeting from the global oil-and-gas industry to specifically include electric companies in North America. That’s according to a report from Dragos, released Thursday, which noted that the discovery is part...
Iranian Hackers Have Been ‘Password-Spraying’ the US Grid
A state-sponsored group called Magnallium has been probing American electric utilities for the past year...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Planning
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition Version 7 that is used by IBM Cognos Planning. These issues were disclosed as part of the IBM Java SDK updates in October 2018, January 2019, April 2019, July 2019 and October 2019. Vulnerability Detai...
CVE-2019-2769
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
libIEC61850 Denial of Service Vulnerability
libIEC61850 is an open source library for the IEC 61850 protocol. A security vulnerability exists in StringUtilscreateStringFromBuffer in the common/stringutilities.c file in libIEC61850 version 1.4.0. An attacker can exploit this vulnerability to cause a large memory allocation and result in a...
[SECURITY] Fedora 29 Update: ghostscript-9.27-2.fc29
This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...
Linux kernel resource management error vulnerability (CNVD-2019-41701)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'cryptoreportstat' function in the drivers/virt/vboxguest/vboxguestutils.c file in versions of Linux kernel pri...
ASUS HM Com Service 1.00.31 - asHMComSvc Unquoted Service Path
ASUS HM Com Service 1.00.31 - asHMComSvc Unquoted Service Path Exploit Title: ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path Date: 2019-11-16 Exploit Author : Olimpia Saucedo Vendor Homepage: www.asus.com Version: 1.00.31 Tested on: Windows 10 Pro x64 but it should works on all...
ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path
Exploit Title: ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path Date: 2019-11-16 Exploit Author : Olimpia Saucedo Vendor Homepage: www.asus.com Version: 1.00.31 Tested on: Windows 10 Pro x64 but it should works on all windows version The application suffers from an unquoted servic...
[SECURITY] Fedora 31 Update: iwd-1.0-1.fc31
The daemon and utilities for controlling and configuring the Wi-Fi network hardware...
[SECURITY] Fedora 31 Update: bluez-5.52-1.fc31
Utilities for use in Bluetooth applications: - hcitool - hciattach - hciconfig - bluetoothd - l2ping - rfcomm - sdptool - bccmd - bluetoothctl - btmon - hcidump - l2test - rctest - gatttool - start scripts Red Hat - pcmcia configuration files - avinfo The BLUETOOTH trademarks are owned by Bluetoo...
Sojobo - A Binary Analysis Framework
Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don't need to install or compile any other external libraries the project is self contained. With Sojobo you can: Emulate a 32 bit PE binary...
rubygems: Escape sequence injection vulnerability in API response handling
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilitieswithresponse may output the API response to stdout as it is. Therefore, if the API side modifies the response, escape sequence injection may occur...
CVE-2019-16680
A path traversal vulnerability was discovered in the file-roller Archive Manager for GNOME in the way file paths with special characters are sanitized. Archives containing the sequence of characters "../" in a file path may be vulnerable to this flaw. A remote attacker could exploit this flaw by...
OPENSUSE-SU-2019:2408-1 Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. bsc1150733 This update was imported from the SUSE:SLE-15:Update update project...
The vulnerability of the standard command-line utility package for the Debian GNU/Linux operating system, which allows a hacker to increase their privileges
The vulnerability of the srxpfe process in the JunOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...