Chromium Security Updates for Microsoft Edge (Chromium-Based)

Please note: Starting 1/21/2021, we will be releasing the Chrome CVEs that are included in the new releases of Microsoft Edge Chromium-based directly in the Security Update Guide. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information. This advisory will...

CVE-2020-7238

creationtimestamp| type| source ---|---|--- 2020-01-27 21:37:54+00:00| seen| https://t.me/cveNotify/460 2021-06-11 20:21:30+00:00| seen| Telegram/B3TNtUdrR153p0vf62u87D3heM8MRotTO-JFGaE6KD1sdoo...

CVE-2011-5018

creationtimestamp| type| source ---|---|--- 2020-01-09 02:32:32+00:00| seen| https://t.me/cibsecurity/9056 2020-01-14 16:39:10+00:00| seen| https://t.me/cibsecurity/9160...

Hackers Stole Customers' Payment Card Details From Over 700 Wawa Stores

Have you stopped at any Wawa convenience store and used your payment card to buy gas or snacks in the last nine months? If yes, your credit and debit card details may have been stolen by cybercriminals. Wawa, the Philadelphia-based gas and convenience store chain, disclosed a data breach incident...

LifeLabs Paid Hackers to Recover Stolen Medical Data of 15 Million Canadians

LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical information of nearly 15 million Canadians customers. The company announced the breach in a press release posted on its website, revealing...

CVE-2019-10480

creationtimestamp| type| source ---|---|--- 2019-12-11 03:00:17+00:00| seen| https://t.me/indoghostsec/731 2019-12-11 16:24:35+00:00| seen| https://t.me/indoghostsec/751 2019-12-13 11:21:12+00:00| seen| Telegram/iQUZE2pIByE4vkwExY2sw7tjReCcmi36nOFNFwktNW4 2019-12-14 01:31:35+00:00| seen|...

CVE-2011-3600

creationtimestamp| type| source ---|---|--- 2019-11-26 08:57:30+00:00| seen| https://t.me/cibsecurity/8324 2024-10-25 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-25 2024-10-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-26...

Patch Management 1.3 New Features

This release of Qualys Patch Management version 1.3 includes new features, highlights as follows. Patch Scheduling enhancement: "No Patch Window" – When scheduling a patch deployment, instead of having to specify a Patch Window time frame, you can select "None". This will allow a job to continue ...

CVE-2015-0062

creationtimestamp| type| source ---|---|--- 2019-09-02 07:38:24+00:00| seen| MISP/5d66cc9e-9f94-4a7e-8a49-115e0a3b4631 2020-10-09 14:38:35+00:00| seen| MISP/459a5739-951a-4559-a57b-71461249891f 2026-07-29 12:01:14+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30...

Qualys Cloud Platform 2.40 New Features

This release of the Qualys Cloud Platform version 2.40 includes updates and new features for Web Application Scanning, highlights as follows. Web Application Scanning "Everything" Detection Scope – A new detection scope called "Everything" is now available in the option profile. This can be used ...

CVE-2019-8662

creationtimestamp| type| source ---|---|--- 2019-07-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47189 2019-07-30 07:52:04+00:00| seen| https://t.me/androidMalware/248 2019-11-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47608...

CVE-2019-6637

creationtimestamp| type| source ---|---|--- 2019-07-04 18:00:04+00:00| seen| https://t.me/cveNotify/188 2019-07-05 17:00:18+00:00| seen| https://t.me/cveNotify/244...

CVE-2019-1821

creationtimestamp| type| source ---|---|--- 2019-05-16 18:58:50+00:00| seen| https://t.me/informationsecuritychannel/27576 2019-05-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47686 2019-06-19 16:07:26+00:00| seen|...

Improper Signature Validation

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as...

Improper Signature Validation

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as...

CVE-2015-1340

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:42+00:00| seen| https://t.me/cibsecurity/3856 2019-04-29 18:27:22+00:00| seen| https://t.me/cibsecurity/3996...

Qualys Cloud Platform 2.38 New Features

This release of the Qualys Cloud Platform version 2.38 includes updates and new features for AssetView, Web Application Firewall, and Web Application Scanning, highlights as follows. AssetView Azure Instance State search token and Dynamic Tag Support – A new search token "azure.vm.state" is added...

CVE-2019-9670

creationtimestamp| type| source ---|---|--- 2019-04-10 17:38:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbraxxerce.rb 2019-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46693 2020-07-16 18:25:54+00:00| seen|...

CVE-2019-0841

creationtimestamp| type| source ---|---|--- 2019-04-10 08:14:06+00:00| published-proof-of-concept| https://t.me/ExcreamOnSecurity/40 2019-04-10 08:15:27+00:00| published-proof-of-concept| https://t.me/ExcreamOnSecurity/41 2019-04-10 21:31:35+00:00| published-proof-of-concept|...

Georgia Tech Data Breach Exposes 1.3 Million Users' Personal Data

The Georgia Institute of Technology, well known as Georgia Tech, has confirmed a data breach that has exposed personal information of 1.3 million current and former faculty members, students, staff and student applicants. In a brief note published Tuesday, Georgia Tech says an unknown outside...