PT-2019-5757

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.10.1 Description The issue is related to a use-after-free error in the ZRLEDecoder of TigerVNC, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial...

PT-2019-5754

Name of the Vulnerable Software and Affected Versions TigerVNC versions prior to 1.10.1 Description The issue is related to insufficient checking of unusual or exceptional states in the CMsgReader::readSetCursor function of the VNC TigerVNC software. This could allow a remote attacker to access...

TP-Link Routers Give Cyberattackers an Open Door to Business Networks

A firmware vulnerability in TP-Link Archer C5 v4 routers used in enterprise and home environments could allow unauthorized, remote access to the device with administrative privileges. The bug CVE-2017-7405 affects models that run firmware version 3.16.0 0.9.1 v600c.0 Build 180124 Rel.28919n. Firs...

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM i Operating System (CVE-2013-0149 and CVE-2013-5385)

Problem : The OSPFv2 routing protocol specified in RFC 2328 has an ambiguity that can be exploited and allow for traffic to be black-holed and/or redirected. A PTF is provided. Resolving The Problem VULNERABILITY DETAILS: DESCRIPTION: A potential protocol vulnerability has been identified in the...

Microsoft Excel Information Leakage Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to compromise a user's computer or data with the help of specially crafted document files...

PT-2019-5776

Name of the Vulnerable Software and Affected Versions SchedMD Slurm versions prior to 18.08.9 SchedMD Slurm versions 19.x prior to 19.05.5 Description The issue is related to the srun --uid command in the SLURM resource management system, which is associated with insecure privilege management...

PT-2019-6158

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.44 Description The issue is related to a flaw in the interpretation of HTTP requests in the HttpObjectDecoder.java component of the Netty network programming tool. This flaw can be exploited by a remote attacker to...

The vulnerability of the mod_session module in the Apache HTTP Server allows a hacker to compromise the integrity of protected data.

The vulnerability of the modsession module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected data using the Session header...

CVE-2019-2996

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Deployment. The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Lizard Squad Threatens UK's Labour Leader with Cyberattacks Against His Family

Lizard Squad, the well-known hacktivist cybergang, is pledging to mount personal cyberattacks on Britain’s Labour Party leader, Jeremy Corbyn. As the UK continues to be roiled by Brexit debate ahead of a Dec. 12 general election, the Labour Party said on Tuesday that it had been targeted by a...

Input validation

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

PT-2021-6488

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to a floating point exception in the Fraction function of the libheif library, which can lead to a Denial of Service or other unspecified impacts. It is also associated with errors in...

PT-2019-5185

Name of the Vulnerable Software and Affected Versions Squid versions 3.x through 4.8 Description The issue arises when the append domain setting is used, due to improper interaction between appended characters and hostname length restrictions, leading to incorrect message processing. This can cau...

CVE-2018-3123

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: libmysqld. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

PT-2019-6226

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 0.9.0 Description The issue is related to the amqp handle input function in the amqp connection.c component of the RabbitMQ message broker, which lacks frame size checking. This allows a remote attacker to access confidential...

The vulnerability of SMF services and legacy daemons in the Oracle Solaris operating system allows a attacker to compromise the integrity of protected information or cause partial service interruptions.

The vulnerability of SMF services and legacy daemons in the Oracle Solaris operating system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause partial service interruptions...

CVE-2018-2973

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JSSE. Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2019-2911

Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

PT-2019-4825

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 70 Firefox ESR versions prior to 68.2 Thunderbird versions prior to 68.2 Description The issue is related to an error in accessing a privileged JSONView object that was cloned into content, allowing a remote attacker ...

PT-2019-5102

Name of the Vulnerable Software and Affected Versions file versions through 5.37 Description The issue is related to a heap-based buffer overflow error in the cdf read property info function, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and...