IBM Sterling File Gateway SQL Injection Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An SQL injection vulnerability exists in IBM Sterling File...

libjpeg: "cjpeg" utility large loop because read_pixel in rdtarga.c mishandles EOF

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...

mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply()

The mpatchapply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004...

July 9, 2019—KB4507450 (OS Build 15063.1928)

None None...

July 9, 2019—KB4507435 (OS Build 17134.885)

None None...

Apple Suspends Siri Program After Privacy Backlash

Apple is suspending a program that lets contractors listen in on Siri voice recordings after facing a rain of backlash regarding the privacy implications of the program. The suspension comes after a report in The Guardian last week outlining how contractors regularly listen to intimate voice...

(RHSA-2019:2000) Low: Red Hat OpenShift Enterprise final end-of-life notice

As part of the maintenance phase, qualified security patches of Critical or Important impact, as well as select mission-critical bug-fix patches, were released for Red Hat OpenShift Enterprise 3.6 and Red Hat OpenShift Container Platform 3.7. After July 31, 2019, customers will not receive those...

Unauthorized Access Vulnerability in Shaanxi Cloud Enterprise CMS System

Ltd. currently has subsidiaries - Yulin Cloud Enterprise Media Co., Ltd. and Yulin Ali Zongchuang Information Technology Co. Shaanxi Cloud Enterprise CMS system has an unauthorized access vulnerability, attackers can use the vulnerability to directly front-end access to the administrator account...

DEBIAN-CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled...

PT-2019-13572 · Pdfresurrect +2 · Pdfresurrect +2

Name of the Vulnerable Software and Affected Versions: PDFResurrect version 0.15 Description: The issue arises from a buffer overflow that occurs when PDFResurrect mishandles data associated with startxref and %%EOF in a crafted PDF file. Recommendations: For PDFResurrect version 0.15, at the...

GigToDo 1.3 - Cross-Site Scripting

GigToDo 1.3 - Cross-Site Scripting Exploit Title: GigToDo - Freelance Marketplace Script v1.3 Persistent XSS Injection Google Dork: - Date: 2019/07/28 Author: m0ze Vendor Homepage: https://www.gigtodoscript.com Software Link: https://codecanyon.net/item/gigtodo-freelance-marketplace-script/238553...

Windows Server 2008 End of Support: Are you Prepared?

On July 14th, 2015, Microsoft’s widely deployed Windows Server 2003 reached end of life after nearly 12 years of support. For millions of enterprise servers, this meant the end of security updates, leaving the door open to serious security risks. Now, we are fast approaching the end of life of...

grapheneX - Automated System Hardening Framework

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

(RHSA-2019:1862) Low: Red Hat OpenShift Enterprise one-month end-of-life notice

As part of the maintenance phase, qualified security patches of Critical or Important impact, as well as select mission-critical bug-fix patches, were released for Red Hat OpenShift Enterprise 3.6 and 3.7. After July 31st, 2019, customers will not receive those updates. Red Hat OpenShift Containe...

Arbitrary File Deletion Vulnerability in ShyPost Enterprise Management System

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System has an arbitrary file deletion vulnerability, the vulnerability stems from the management of the back-end of the deletion of the picture, did not limit the...

Kernel update: Virtuozzo ReadyKernel patch 84.0 for all supported Virtuozzo 7.0 and Virtuozzo Infrastructure Platform kernels

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo 7.0 and Virtuozzo Infrastructure Platform. NOTE: No more patches are planned for the kernel 3.10.0-693.11.6.vz7.40.4, support for which ends with this update...

Shanghai Meicang Technology Information Development Co., Ltd. xss vulnerability exists in the frontend of build star

Ltd., is a cloud computing-based Internet application service provider. There is an xss vulnerability in the front-end of BuildStar, which can be exploited by attackers to inject arbitrary Web scripts or HTML...

July 16, 2019—KB4507467 (OS Build 15063.1955)

None None...

July 16, 2019—KB4507466 (OS Build 17134.915)

None None...

The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules, allowing attackers to execute arbitrary code with AMP service privileges.

The vulnerability of Cisco AMP’s security tools for end devices stems from insufficient checks on dynamically loaded modules. Exploiting this vulnerability could allow attackers to execute arbitrary code with AMP service privileges...