13603 matches found
openSUSE: Security Advisory for podman, slirp4netns and libcontainers-common (openSUSE-SU-2019:2044-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Command Injection
Overview devcert-sanscache is a package that can be used to generate trusted local SSL/TLS certificates for local SSL development. Affected versions of this package are vulnerable to Command Injection. The variable commonName controlled by user input is used as part of the exec function without a...
Keeping up with security
Abstract Keeping up with security Body At IBM we often get asked about security vulnerabilities and how our products are impacted. Did you know there is a pro-active step you can take to stay informed? IBM has a community, similar to the Asset Management one, where you can subscribe to security...
CVE-2012-3409
creationtimestamp| type| source ---|---|--- 2019-12-20 16:43:21+00:00| seen| https://t.me/cibsecurity/8799...
CVE-2012-6094
CVE-2012-6094 affects the Common UNIX Printing System (CUPS). The issue is that the option to listen on localhost:631 is not honored, which could allow unauthorized access to the system’s web-based admin interface. Publicly documented mitigations include patches in cups updates (e.g., openSUSE cu...
Security Bulletin: IBM Tivoli Common Reporting (TCR) interim fixes address Security Vulnerability and Exposure CVE-2014-0224
Summary IBM Tivoli Common Reporting TCR interim fixes address Security Vulnerability and Exposure CVE-2014-0224 Vulnerability Details Security Vulnerability and Exposure CVE-2014-0224: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of...
DL1 bug fix update
An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: IPA upgrade...
CVE-2019-18935
creationtimestamp| type| source ---|---|--- 2019-12-16 10:28:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/3527 2019-12-17 21:25:58+00:00| published-proof-of-concept| https://t.me/antichat/7389 2019-12-17 22:22:18+00:00| published-proof-of-concept|...
GALLIUM: Targeting global telecom
Microsoft Threat Intelligence Center MSTIC is raising awareness of the ongoing activity by a group we call GALLIUM, targeting telecommunication providers. When Microsoft customers have been targeted by this activity, we notified them directly with the relevant information they need to protect...
