Debian: Security Advisory (DLA-1117-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player Multiple Remote Code Execution Vulnerabilities - Mac OS X

Adobe Flash Player is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Flash Player Within Google Chrome Multiple RCE Vulnerabilities - Linux

Adobe Flash Player is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to errors in the implementation of cryptographic algorithms, allows attackers to disclose secret keys.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to errors in the implementation of cryptographic algorithms for generating time stamps when the Kerberos security function is enabled. Exploiting this vulnerability can allow a malicious actor to obta...

Threat Outbreak Alert RuleID31860: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56624 First Published: 2018 January 31 16:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31860 may contain the following files: Name |...

Debian DLA-1262-1 : thunderbird security update

Multiple security issues have been found in the Mozilla Thunderbird mail client: Multiple memory safety errors, use after free, integer overflows and other implementation errors may lead to crashes or the execution of arbitrary code. For Debian 7 'Wheezy', these problems have been fixed in versio...

Debian: Security Advisory (DLA-1262-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

What you didn’t know about OWASP Top-10 2017? Part 1/3

I hope everybody have already read the latest OWASP Top-10 list . Let me share some useful insights about it. First of all, OWASP Top-10 is NOT a vulnerability classification system. Rather it is a list of the most critical security risks for web application. What’s the difference? For example, t...

Fedora 27 : wordpress (2018-48da15ea59)

Upstream announcement : WordPress 4.9.2 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. An XSS vulnerability was discovered in the Flash fallback files in MediaElement, a library that is...

Fedora 26 : wordpress (2018-19c693fd9a)

Upstream announcement : WordPress 4.9.2 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately. An XSS vulnerability was discovered in the Flash fallback files in MediaElement, a library that is...

CVE-2017-1515

IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825...

PT-2018-5783 · Ibm · Ibm Doors Web Access

Name of the Vulnerable Software and Affected Versions: IBM Doors Web Access versions 9.5 through 9.6 Description: The issue allows an authenticated user to obtain sensitive information from HTTP internal server error responses. Recommendations: For IBM Doors Web Access versions 9.5 through 9.6,...

CVE-2018-5965

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

[SECURITY] [DSA 4096-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4096-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 25, 2018 https://www.debian.org/security/faq -...

Pool update does not complete when CPU feature set has changed

When applying a hotfix that contains CPU feature setchangesto a XenServer host or pool that has running VMs, the XenCenterInstall Update wizard might stop after installing the update on one or more of the hosts and display the following error: The host does not have some of the CPU features that...

Debian DLA-1256-1 : firefox-esr security update

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version...

Debian DSA-4096-1 : firefox-esr - security update

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, integer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service or URL spoofing. C Tenable Network Security, Inc. The...

[SECURITY] [DLA 1256-1] firefox-esr security update

Package : firefox-esr Version : 52.6.0esr-1deb7u1 CVE ID : CVE-2018-5089 CVE-2018-5091 CVE-2018-5095 CVE-2018-5096 CVE-2018-5097 CVE-2018-5098 CVE-2018-5099 CVE-2018-5102 CVE-2018-5103 CVE-2018-5104 CVE-2018-5117 Several security issues have been found in the Mozilla Firefox web browser: Multiple...

The vulnerability of the `ih264d_get_implicit_weights` function (decoder/ih264d_parse_bslice.c) in the Media Framework component of the Android operating system, which allows a perpetrator to manipulate the accessibility of data.

The vulnerability of the ih264dgetimplicitweights function in the decoder/ih264dparsebslice.c file of the Media Framework component of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibilit...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to compromise the accessibility of data

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability allows an attacker to compromise data accessibility...