11758 matches found
CVE-2019-13306
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors...
CVE-2019-13306
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors...
Ubuntu: Security Advisory (USN-4038-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4038-4 bzip2 regression
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. We apologize for the inconvenience. Original advisory details: It was...
USN-4038-4: bzip2 regression
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. We apologize for the inconvenience. Original advisory details: It was...
USN-4038-3: bzip2 regression
USN-4038-1 fixed a vulnerability in bzip2. The update introduced a regression causing bzip2 to incorrect raises CRC errors for some files. We apologize for the inconvenience. Original advisory details: It was discovered that bzip2 incorrectly handled certain files. An attacker could possibly use...
The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to errors in permission processing. Exploiting this vulnerability could allow a malicious actor to gain access to the protected files of the vulnerable device remotely...
The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.
The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the installation program for the OpenVINO toolset for Linux operating systems allows a hacker to disclose protected information.
The vulnerability of the installation program for the OpenVINO application development suite on Linux operating systems is related to security mechanism errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...
The vulnerability of D-Link DIR-823G router’s microprogram code, related to access control errors, allows a hacker to intercept the DNS service configuration.
The vulnerability of D-Link DIR-823G router’s microprogram code is related to access control errors. Exploiting this vulnerability allows a malicious actor to intercept DNS service configurations through the API interface using the SetWanSettings function...
Firefox to Automatically Trust OS-Installed CA Certificates to Prevent TLS Errors
Mozilla has finally introduced a mechanism to let Firefox browser automatically fix certain TLS errors, often triggered when antivirus software installed on a system tries to intercept secure HTTPS connections. Most Antivirus software offers web security feature that intercepts encrypted HTTPS...
Firefox to Automatically Trust OS-Installed CA Certificates to Prevent TLS Errors
Mozilla has finally introduced a mechanism to let Firefox browser automatically fix certain TLS errors, often triggered when antivirus software installed on a system tries to intercept secure HTTPS connections. Most Antivirus software offers web security feature that intercepts encrypted HTTPS...
openSUSE Security Update : ansible (openSUSE-2019-1635)
This update for ansible fixes the following issues : Ansible was updated to version 2.8.1 : Full changelog is at /usr/share/doc/packages/ansible/changelogs/ - Bugfixes - ACI - DO not encode querystring - ACI modules - Fix non-signature authentication - Add missing directory provided via...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...
The vulnerability of the GPS logger data collection program, related to initialization errors, allows a violator to trigger a service failure.
The vulnerability of the GPS logger data collection program is related to initialization errors. Exploiting this vulnerability can allow a hacker to cause the program to terminate abnormally...
The vulnerability of the plot tool in the GNU plotutils graphical data visualization package allows a perpetrator to trigger a service failure.
The vulnerability of the plot tool in the GNU plotutils graphical data visualization package relates to initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering specially crafted data...
The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode
The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created program...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by using a specially crafted web page...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...
The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Audio service on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created program...