Connected Medicine and Its Diagnosis

Medical data is slowly but surely migrating from paper mediums to the digital infrastructure of medical institutions. Today, the data is "scattered" across databases, portals, medical equipment, etc. In some cases, the security of the network infrastructure of such organizations is neglected, and...

The vulnerability of the load_level function in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the loadlevel function in the coders/xcf.c file of the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure memory exhaustion due to loadtile using a specially...

The vulnerability of the CRYPTO_ASSOC function in the ntpd daemon of the Network Time Protocol, allowing a intruder to cause a service failure.

The vulnerability of the CRYPTOASSOC function in the ntpd daemon of the Network Time Protocol is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause a service failure e.g., memory usage issues...

Error Cannot get apps from the store on Storefront

Upgraded Storefront from 3.9 to 3.11. During the test conducted I am able to successfully: - Log in via browser Chrome internally and externally and launch applications. - Open Citrix Receiver internally, log in and launch apps. What no longer works is external receiver access. On launching the...

Secure Mail does not sync emails after upgrading to version 10.6.0

Emails are not syncing for users after the Secure Mail update to 10.6.0. We will see the following Socket errors in the logs: 2017-07-25T06:17:37.266-0400 AGTunneler INFO 4 -AGSocket connect:withPort: -AGSocket connect:withPort:: CallOriginalconnect errno = 36 - 'Operation now in progress', fd = ...

[SECURITY] [DLA 1087-2] icedove/thunderbird regression update

Package : icedove Version : 1:52.3.0-4deb7u2 The update for icedove/thunderbird issued as DLA-1087-1 did not build on i386. This update corrects this. For reference, the original advisory text follows. Multiple security issues have been found in the Mozilla Thunderbird mail client: Multiple memor...

Explained: False positives

What are false positives? False positive, which is sometimes written as f/p, is an expression commonly used in cybersecurity to denote that a file or setting has been flagged as malicious when it’s not. In statistics, false positives are called Type I errors, because they check for a particular...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-999)

This update for cacti and cacti-spine fixes security issues and bugs. The following vulnerabilities were fixed : - CVE-2017-12927: Cross-site scripting vulnerability in methodparameter bsc1054390 - CVE-2017-12978:Cross-site scripting vulnerability via the title field bsc1054742 It also contains a...

Error: "Your account cannot be added using this server address" When Adding Sites in Native Receiver

User without administrative privilege User1 installed receiver and later customer uninstalled receiver by switching to admin user User2 in the CMD prompt and then runningReceiver Clean-Up Utility tool in the CMD prompt with administrative privilege. Then following issue happened: 1. Receiver fail...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

DEBIAN-CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

Management GUI Unavailable After Software Upgrade

When attempting to login to the management interface the page is not displayed correctly and login is not possible. Symptoms can vary somewhat, but often rdx-related script errors are seen...

The vulnerability of the WLAN driver for Android CAF-releases allows a hacker to create a situation where the operator of the proof-of-parity fails to detect errors.

The vulnerability of the Android CAF-release operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, or accessibility of protected information when the ioctl WLAN driver function is...

The vulnerability of the Android CAF-release operating system driver, which exists due to errors in memory buffer handling, allows a hacker to trigger a kernel memory leak.

The vulnerability of the Android CAF-release operating system driver is caused by an operation that occurs outside the buffer memory boundaries. Exploiting this vulnerability could potentially allow a remote attacker to cause a kernel memory leak...

The vulnerability of the Android CAF-release operating system, related to security configuration errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by having the UE component respond to the...

The vulnerability of the Android operating system from the CAF repository exists due to pointer assignment errors, allowing attackers to cause memory corruption.

The vulnerability of the Android operating system from the CAF repository is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause memory corruption in the Guest OS...

The vulnerability of the Android operating system from the CAF repository exists due to errors in pointer assignment, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system from the CAF repository is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information under conditions of memory shortage...

Denial Of Service (DoS) Through Memory Consumption

apache-shiro is vulnerable to denial of service DoS attacks. The library does not catch unexpected errors in scheduled tasks, causing threads to run indefinitely without being terminated. This can lead to the application running out of memory and crashing...