9562 matches found
PT-2018-3329
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 31.0.0.153 and earlier Adobe Flash Player versions 31.0.0.108 and earlier Description: The issue is related to a use-after-free vulnerability in Adobe Flash Player. Successful exploitation could lead to arbitrary...
CVE-2018-15437
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection AMP for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system...
Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection AMP for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system...
java-1.7.0-openjdk security update
1:1.7.0.201-2.6.16.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.201-2.6.16.1 - Bump to 2.6.16 and u201b00. - Update 8076221/PR2809 disable RC4 to apply after 8208350 disable DES - Resolves: rhbz1633817...
PT-2018-3707 · Poppler +5 · Poppler +5
Name of the Vulnerable Software and Affected Versions: Poppler version 0.71.0 Description: The issue is related to a reachable abort in Object.h, which can lead to a denial of service. This is because the EmbFile::save2 function in FileSpec.cc lacks a stream check before saving an embedded file...
389-ds-base security, bug fix, and enhancement update
1.3.8.4-15 - Bump version to 1.3.8.4-15 - Resolves: Bug 1624004 - Fix regression in last patch 1.3.8.4-14 - Bump version to 1.3.8.4-14 - Resolves: Bug 1624004 - potential denial of service attack 1.3.8.4-13 - Bump version to 1.3.8.4-13 - Resolves: Bug 1623949 - Crash in deletepasswdPolicy when...
PT-2018-16284 · Yi · Yi Home Camera
Name of the Vulnerable Software and Affected Versions: Yi Home Camera 27US version 1.8.7.0D Description: A firmware downgrade vulnerability exists in the firmware update functionality. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD...
PT-2018-16291 · Yi · Yi Home Camera
Name of the Vulnerable Software and Affected Versions: Yi Home Camera 27US version 1.8.7.0D Description: An exploitable code execution issue exists in the QR code scanning functionality. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans info call can...
PT-2018-16283 · Yi · Yi Home Camera
Name of the Vulnerable Software and Affected Versions: Yi Home Camera 27US version 1.8.7.0D Description: An exploitable code execution issue exists in the firmware update functionality. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker...
PT-2018-16312 · Yi · Yi Home Camera
Name of the Vulnerable Software and Affected Versions: Yi Home Camera version 1.8.7.0D Description: An exploitable code execution issue exists in the firmware update functionality. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An...
Cisco Advanced Malware Protection for Endpoints DLL Preload Vulnerability
Cisco Advanced Malware Protection AMP for Endpoints for Windows is a Windows-based endpoint security solution from Cisco. The product mainly has advanced threat prevention, monitoring and response features. A security vulnerability exists in the DLL loading component of Cisco AMP for Endpoints fo...
java-1.7.0-openjdk security update
1:1.7.0.201-2.6.16.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.201-2.6.16.0 - Bump to 2.6.16 and u201b00. - Update 8076221/PR2809 disable RC4 to apply after 8208350 disable DES - Resolves: rhbz1633817...
PT-2018-16350 · Sophos · Sophos Hitmanpro.Alert
Name of the Vulnerable Software and Affected Versions: Sophos HitmanPro.Alert version 3.7.6.744 Description: A memory disclosure issue exists in the 0x222000 IOCTL handler functionality. This can be triggered by a specially crafted IRP request, causing the driver to return uninitialized memory an...
System Management Module Vulnerabilities - Lenovo Support US
No description provided...
PT-2018-14468 · Xpdf +2 · Xpdf +2
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.00 Description: The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, via a crafted pdf file. This is demonstrated by the use of pdftoppm, which exploits the...
October 18, 2018—KB4462927 (Preview of Monthly Rollup)
None None...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Unspecified Vulnerability in Tinc VPN
Tinc VPN is a virtual private network VPN daemon that uses tunneling and encryption to create secure private networks between hosts on the Internet. A security vulnerability exists in Tinc VPN version 1.0.34 and earlier. An attacker can exploit this vulnerability to disable encryption of VPN...
OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)
The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which...
