Security Updates for Microsoft Excel Products C2R (April 2019)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited t...

CVE-2019-20781

An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur...

Code injection

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 April 2019...

Oracle WebCenter Sites Multiple Vulnerabilities (April 2019 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI version 12.2.1.3.0 is vulnerable to multiple vulnerabilities. - A vulnerability exists that could allow a remote attacker with network access over HTTP to to compromise Orable WebCenter Sites. This could result...

CVE-2019-20610

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

CVE-2019-20609

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 April 2019...

CVE-2019-20608

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. An attacker can use Emergency mode to disable features. The Samsung IDs are SVE-2018-13164, SVE-2018-13165 April 2019...

CVE-2019-20611

An issue was discovered on Samsung mobile devices with N7.x, O8.x, Go8.1, P9.0, and Go9.0 Exynos chipsets software. A baseband stack overflow leads to arbitrary code execution. The Samsung ID is SVE-2019-13963 April 2019...

CVE-2019-20609

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-2019-13899 April 2019...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Pak System (April2019 updates)

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 used by the IBM Cloud Pak System formerly known as PureApplication System were disclosed as part of the IBM Java SDK updates in April 2019. IBM Cloud Pak System has addressed the vulnerabilities. Vulnerability Detail...

Remote code execution

An issue was discovered in the Core Server in Ivanti Endpoint Manager EPM 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update...

Security Bulletin: The IBM Runtime Environment Java Version 8 used by Transparent Cloud Tiering has a vulnerability which disclosed as part of the IBM Java SDK updates in April 2019

Summary The IBM Runtime Environment Java Version 8 used by Transparent Cloud Tiering has a vulnerability which disclosed as part of the IBM Java SDK updates in April 2019. Transparent Cloud Tiering has addressed the applicable vulnerability. Vulnerability Details CVEID: CVE-2019-2602 DESCRIPTION:...

Oracle MySQL Connectors Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle MySQL Connectors installed on the remote host is 8.0.x prior to 8.0.16 or 5.3.x prior to 5.3.13. It is, therefore, affected by multiple vulnerabilities as noted in the April 2019 Critical Patch Update advisory: - An unspecified vulnerability in Connector/J subcomponent. An...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affects WebSphere Application Server April 2019 CPU that is bundled with IBM WebSphere Application Server Patterns

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the IBM Java SDK updates in April 2019. Vulnerability Details For information on the IBM Java SDK that is now bundled with...

Security Bulletin: Multiple security vulnerabilities has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI - April 2019 CPU

Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. These issues were disclosed as part of the IBM Java SDK updates in April 2019. Vulnerability...

CVE-2019-8285

Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution...

Kaspersky Lab Antivirus Engine Heap Buffer Overflow Vulnerability

Kaspersky Lab Antivirus Engine is an anti-virus engine from the Russian laboratory Kaspersky. A heap buffer overflow vulnerability exists in versions prior to Kaspersky Lab Antivirus Engine 04.apr.2019. The vulnerability originates when a networked system or product performs an operation on memor...

Fedora 30 : 1:java-11-openjdk (2019-a8996fb898)

Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-April/0009 51.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

CVE-2019-10664

creationtimestamp| type| source ---|---|--- 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46773...

MySQL 8.0.x < 8.0.16 Multiple Vulnerabilities (Apr 2019 CPU)

Binary data 700634.prm...