CVE-2019-11156

Logic errors in IntelR PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege, denial of service, and information disclosure via local access...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2106)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

The vulnerability of the sdpplin_parse function (input/libreal/sdpplin.c) in the Xine-lib library allows a hacker to execute arbitrary code.

The vulnerability of the sdpplinparse function in the Xine-lib library is related to errors in number processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Open function in the modules/demux/wav.c file of the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/wav.c file is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .WAV file...

The vulnerability of the TY demux plugin (ty.c) in the Media Player software VideoLAN VLC allows a hacker to execute arbitrary code.

The vulnerability of the TY demux plugin ty.c in the Media Player software VideoLAN VLC is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .ty file...

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux allows a hacker to obtain the server LDAP administrator password.

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

The vulnerability of the XSPF component in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the XSPF component in the VideoLAN VLC media player software is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the MP4_ReadBox_rdrf function in the Media Player software VideoLAN VLC allows a attacker to cause a service failure.

The vulnerability of the MP4ReadBoxrdrf function in the VideoLAN VLC media player’s libmp4.c file is related to numerical processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the software authentication module of the Cisco Content Security Management Appliance allows a hacker to gain access to spam messages from other users.

The vulnerability of the software authentication module of the Cisco Content Security Management Appliance is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to spam messages from other users...

The vulnerability of the mms_ReceiveCommand function (modules/access/mms/mmstu.c) in the VideoLAN VLC media player software allows a hacker to execute arbitrary code.

The vulnerability of the mmsReceiveCommand function in the VideoLAN VLC media player’s modules/access/mms/mmstu.c file is related to integer handling errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

HP Inkjet printers information disclosure vulnerability

HP Inkjet printers are an Inkjet series of printers from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Inkjet printers. The vulnerability arises from errors in the configuration of the networked system or in the operation of the product. The vulnerability can be...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

PYSEC-2019-196

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

CVE-2019-12410

CVE-2019-12410 affects Apache Arrow 0.12.0–0.14.1, where memory for Arrow Arrays could be left uninitialized when reading RLE null data from Parquet. This impacts C++, Python, Ruby, and R implementations and could lead to leaking uninitialized memory if data is transmitted (e.g., Flight) or persi...

Dell RSA BSAFE Micro Edition Suite Information Disclosure Vulnerability

Dell RSA BSAFE Micro Edition Suite is an encryption toolkit from Dell USA. An information disclosure vulnerability exists in Dell RSA BSAFE Micro Edition Suite. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An attacker...

Authorization Bypass

evolution-ews is vulnerable to authorization bypass. The vulnerability exists as all certificate errors ignored if configured to ignore an initial error in gnome-online-accounts creation resulting in the connection open to being viewed and modified...

RHEL 8 : evolution (RHSA-2019:3699)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3699 advisory. Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality. Security Fixes:...

RHEL 8 : kernel (RHSA-2019:3517)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3517 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfs: use-after-free in...

Moderate: Red Hat Security Advisory: evolution security and bug fix update

An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...