Windows Search Code Execution

The vulnerability of the Windows Search component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using specially created messages sent to the search service, including those using an...

IBM Connections Information Disclosure Vulnerability (CNVD-2018-26361)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...

CVE-2018-1935

IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid request error messages. IBM X-Force ID: 153315...

PT-2018-1995

Name of the Vulnerable Software and Affected Versions McAfee True Key Windows Client versions 5.1.230.7 and earlier Description The issue is related to privilege management errors in the McAfee True Key Windows Client, which can be exploited to execute arbitrary commands. This can allow an attack...

DEBIAN-CVE-2018-1002105

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary reques...

Google Chrome Domain Spoofing Vulnerability (CNVD-2019-01765)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A domain spoofing vulnerability exists in Google Chrome. The vulnerability stems from the URL Formatter in Google Chrome mishandling obfuscated characters. A remote...

PT-2018-2922

Name of the Vulnerable Software and Affected Versions nettle-hash affected versions not specified Description The issue is caused by segmentation errors in the nettle-hash cryptographic hash function tool. Exploitation of this issue may allow an attacker to cause a denial of service by inputting ...

PT-2018-19329

Уязвимость утилиты конвертирования JPEG2000 файлов jasper связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-19346

Уязвимость утилиты создания читаемых версий DTB-файлов fdtdump связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-2809

Name of the Vulnerable Software and Affected Versions gpxlogger affected versions not specified Description The issue is related to initialization errors in the gpxlogger data collection program. Exploitation of this issue may allow an attacker to cause the program to crash unexpectedly...

PT-2018-2925

Name of the Vulnerable Software and Affected Versions dvipos affected versions not specified Description The issue is caused by segmentation errors in the position calculation tool for DVI files in dvipos. Exploitation of this issue may allow an attacker to cause a denial of service by inputting ...

PT-2018-19343

Уязвимость компонента Virtual Distributed Ethernet Switch vde l3 связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

PT-2018-19330

Уязвимость утилиты сравнения изображений imgcmp связана с ошибками сегментирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально сформированной последовательности данных...

Windows 8.1 and Server 2012 R2 KB4345424 Update

The remote Windows host is missing update 4345424. This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: - Addressed issue in which some devices may experience stop error 0xD1 when you run network monitoring workloads...

chromium-browser: Use-after-free in GPU

Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Cisco Meeting Server Information Disclosure

The vulnerability of the Cisco Meeting Server platform arises from errors in processing user requests. Exploiting this vulnerability allows a malicious actor to gain access to protected information through specially crafted requests...

CronJob API Privilege Escalation

The vulnerability in the CronJob API of Cisco Digital Network Architecture DNA platform is caused by errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges remotely...

Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL-R600VPN

Vulnerabilities discovered by Carl Hurd and Jared Rittle of Cisco Talos. Cisco Talos is disclosing multiple vulnerabilities in the TP-Link TL-R600VPN router. TP-Link produces a number of different types of small and home office SOHO routers. Talos discovered several bugs in this particular router...

Updated squid packages fix security vulnerabilities

Due to incorrect input handling, Squid is vulnerable to a Cross-Site Scripting vulnerability when generating HTTPS response messages about TLS errors CVE-2018-19131. Due to a memory leak in SNMP query rejection code, Squid is vulnerable to a denial of service attack CVE-2018-19132...

6 security concerns to consider when automating your business

Automation is an increasingly-enticing option for businesses, especially when those in operations are in a perpetual cycle of "too much to do and not enough time to do it." When considering an automation strategy, business representatives must be aware of any security risks involved. Here are six...