The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows EnterpriseDB database management system for PostgreSQL involves errors in code generation. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability in the web-based administration interface of Cisco Adaptive Security Appliance (ASA) allows a attacker to increase their privileges.

The vulnerability of the Cisco Adaptive Security Appliance ASA network interface management web interface is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through specially crafted HTTP requests...

Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40057)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

Open-Xchange OX App Information Disclosure Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

The vulnerability of the Site Isolation function in Google Chrome web browsers allows attackers to circumvent existing security restrictions.

The vulnerability of Site Isolation in the Google Chrome web browser is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions by using a specially crafted web page...

The vulnerability of the Windows operating system’s DHCP client allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s DHCP client is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially crafted packets that simulate DHCP server responses...

Sean Barrett stb_vorbis Number Error Vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A numeric error vulnerability exists in the 'predictpoint' function in versions 2019-03-04 and earlier. The vulnerability stems from a networked system or product not properly calculating or...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4093-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4093-1 advisory. It was discovered that a heap buffer overflow existed in the Marvell Wireless LAN device driver for the Linux kernel. An attacker could use this to cause...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4094-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4094-1 advisory. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could...

August 13, 2019—KB4512506 (Monthly Rollup)

None None...

bind security, bug fix, and enhancement update

32:9.11.4-9.P2 - Fix CVE-2019-6471 32:9.11.4-8.P2 - Fix scriptlet errors when selinux-policy is not installed 1647659 32:9.11.4-7.P2 - Fix inefective limit of TCP clients CVE-2018-5743 32:9.11.4-6.P2 - Use /sbin/nologin again 1676661 32:9.11.4-5.P2 - Make sure selinux-policy is installed soon...

keepalived security and bug fix update

1.3.5-16 - Rework previous miscscript/vrrpscript patch 1667292 1.3.5-15 - Rework previous checker comparison patch 1715308 1.3.5-14 - Make checker variables non global 1715308 1.3.5-13 - Fix comparison of checkers on reload 1715308 1.3.5-12 - Fix build errors 1678480 1.3.5-11 - Fix problems with...

PT-2019-3066 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

Mooltipass Mini Information Disclosure Vulnerability

Mooltipass Mini is a password management device. An information disclosure vulnerability exists in Mooltipass Mini. The vulnerability arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain...

The vulnerability of the FortiOS operating system, related to access control errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a person with administrator privileges to execute arbitrary code by creating a symbolic link to an executable file in the “/bin/” directory...

PT-2019-3277 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 19.7.30.2 Description: The issue is related to improper file verification, which may allow an authenticated user to potentially enable escalation of privilege via local access. It is also...

PT-2019-3007 · Microsoft · Azure Active Directory +1

Name of the Vulnerable Software and Affected Versions: Azure Active Directory AAD Microsoft Account MSA affected versions not specified Description: An information disclosure issue exists in Azure Active Directory AAD Microsoft Account MSA during the login request session, allowing an attacker to...

The vulnerability of the seccomp component in the Linux operating system’s kernel allows a attacker to increase their privileges and execute arbitrary code.

The vulnerability of the seccomp component in the Linux operating system’s kernel is related to access control errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the OpenLDAP package, related to errors in the implementation of authentication procedures, allows attackers to disclose sensitive information.

The vulnerability of the OpenLDAP package is related to errors in the implementation of authentication procedures. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...

Google Android System Information Disclosure Vulnerability (CNVD-2019-28627)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. An information disclosure vulnerability exists in System in Android. The vulnerability arises from errors in configuration and other errors in th...