Debian DLA-1575-1 : thunderbird security update

Multiple security issues have been found in Thunderbird: Multiple memory safety errors and use-after-frees may lead to the execution of arbitrary code or denial of service. Debian follows the Thunderbird upstream releases. Support for the 52.x series has ended, so starting with this update we're...

PT-2018-2285 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server, which can be exploited by a remote attacker to gain elevated privileges. This...

The vulnerability of the Omnibox component in the Chrome web browser allows a hacker to replace the URI address.

The vulnerability of the Omnibox component in the Chrome web browser is related to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the displayed URI address...

The vulnerability of the Chrome web browser’s AppCache component allows a hacker to exit from an isolated environment and execute arbitrary code.

The vulnerability of the Chrome web browser’s AppCache component is related to errors in access control within a isolated environment. Exploiting this vulnerability allows an attacker to exit the isolated environment and execute arbitrary code...

[SECURITY] [DLA 1575-1] thunderbird security update

Package : thunderbird Version : 1:60.3.0-1deb8u1 CVE ID : CVE-2017-16541 CVE-2018-5156 CVE-2018-5187 CVE-2018-12361 CVE-2018-12367 CVE-2018-12371 CVE-2018-12376 CVE-2018-12377 CVE-2018-12378 CVE-2018-12379 CVE-2018-12383 CVE-2018-12385 CVE-2018-12389 CVE-2018-12390 CVE-2018-12392 CVE-2018-12393...

Dirhunt v0.6.0 - Find Web Directories Without Bruteforce

DEVELOPMENT BRANCH : The current branch is a development version. Go to the stable release by clicking on the master branch. Dirhunt is a web crawler optimize for search and analyze directories. This tool can find interesting things if the server has the "index of" mode enabled. Dirhunt is also...

[SECURITY] [DSA 4337-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4337-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2018 https://www.debian.org/security/faq -...

DEBIAN-CVE-2018-19131

Squid before 4.4 has XSS via a crafted X.509 certificate during HTTPS error page generation for certificate errors...

Citrix ADC MPX/SDX with SSL Coleto Card Installed Fails

Customer may report that their: SVM and VPX eventually become unresponsive GUI access is unavailable for SVM and VPX SSH access only SVM reporting both the instances as Yellow Instance state-YellowOut of service message This issue can be validated by reviewing the following counters getting...

The vulnerability of the FortiOS operating system, caused by errors in authentication mechanisms, allows a perpetrator to gain unauthorized access to the ZebOS shell.

The vulnerability of the FortiOS operating system is caused by errors in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the ZebOS shell...

The vulnerability of the FortiOS operating system’s SSL-VPN implementation, caused by errors in processing input data, allows a hacker to replace encrypted traffic with malicious data.

The vulnerability of the SSL-VPN implementation in the FortiOS operating system arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to replace encrypted traffic using a specially generated MAC...

The vulnerability of the FortiManager system’s operating system, FortiOS, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the FortiManager system’s FortiOS operating system arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

CVE-2018-15317

In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data structures leading to intermittent decrypt BADRECORDMAC errors. Clients will be unable to access the...

Getting an Error: (NMAS)Citrix Application Delivery Management Database requires Maintenance

Error: NetScaler MAS database requires maintenance...

Debian DSA-4327-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird: Multiple memory safety errors and use-after-frees may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

The vulnerability of the computerdefaults component of the Windows operating system, related to access control errors, allows a perpetrator to escalate their privileges through bypassing the UAC mechanism.

The vulnerability of the computer Defaults.exe component of the Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to enhance their privileges by bypassing the UAC mechanism through manipulation of the registry...

The vulnerabilities of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to data conversion errors, allow attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs is related to data conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerabilities of Adobe Acrobat and Adobe Reader PDF viewer/editor programs, related to data conversion errors, allow attackers to execute arbitrary code.

The vulnerability of Adobe Acrobat and Adobe Reader PDF viewer/editor programs is related to data conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML file...

SUSE SLES12 Security Update : smt (SUSE-SU-2018:3467-1)

SMT was updated to version 3.0.38. Following security issue was fixed : CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: Add migration path check when registration sharing is enabled Fix sibling sync...

SUSE-SU-2018:3467-1 Security update for smt

SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...