Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4094-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4094-1 advisory. It was discovered that the alarmtimer implementation in the Linux kernel contained an integer overflow vulnerability. A local attacker could...

August 13, 2019—KB4512506 (Monthly Rollup)

August 13, 2019—KB4512506 Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Note IMPORTANT Verify that you have installed the updates listed in the How to get this update section before installing this update. For all updates starting with August 13, 2019, w...

bind security, bug fix, and enhancement update

32:9.11.4-9.P2 - Fix CVE-2019-6471 32:9.11.4-8.P2 - Fix scriptlet errors when selinux-policy is not installed 1647659 32:9.11.4-7.P2 - Fix inefective limit of TCP clients CVE-2018-5743 32:9.11.4-6.P2 - Use /sbin/nologin again 1676661 32:9.11.4-5.P2 - Make sure selinux-policy is installed soon...

FortiOS Access Control Code Execution

The vulnerability of the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a person with administrator privileges to execute arbitrary code by creating a symbolic link to an executable file in the “/bin/” directory...

keepalived security and bug fix update

1.3.5-16 - Rework previous miscscript/vrrpscript patch 1667292 1.3.5-15 - Rework previous checker comparison patch 1715308 1.3.5-14 - Make checker variables non global 1715308 1.3.5-13 - Fix comparison of checkers on reload 1715308 1.3.5-12 - Fix build errors 1678480 1.3.5-11 - Fix problems with...

Mooltipass Mini Information Disclosure Vulnerability

Mooltipass Mini is a password management device. An information disclosure vulnerability exists in Mooltipass Mini. The vulnerability arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain...

PT-2019-3066 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the Chakra scripting engine in Microsoft Edge. This could allow a remote attacker to execute arbitrary code using a...

PT-2019-3007 · Microsoft · Azure Active Directory +1

Name of the Vulnerable Software and Affected Versions: Azure Active Directory AAD Microsoft Account MSA affected versions not specified Description: An information disclosure issue exists in Azure Active Directory AAD Microsoft Account MSA during the login request session, allowing an attacker to...

PT-2019-3277 · Intel · Intel Driver & Support Assistant

Name of the Vulnerable Software and Affected Versions: Intel Driver & Support Assistant versions prior to 19.7.30.2 Description: The issue is related to improper file verification, which may allow an authenticated user to potentially enable escalation of privilege via local access. It is also...

OpenLDAP Authentication Disclosure

The vulnerability of the OpenLDAP package is related to errors in the implementation of authentication procedures. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...

seccomp Component Privilege Escalation

The vulnerability of the seccomp component in the Linux operating system’s kernel is related to access control errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

PT-2019-4471

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.10 Description The issue is caused by synchronization errors when accessing a shared resource in the Linux kernel's USB character device driver layer. This can be exploited by a malicious USB device,...

Google Android System Information Disclosure Vulnerability (CNVD-2019-28627)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. An information disclosure vulnerability exists in System in Android. The vulnerability arises from errors in configuration and other errors in th...

Google Android System Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. An information disclosure vulnerability exists in System in Android. The vulnerability arises from errors in configuration and other errors in th...

Workspace App for Android - RSA software token import errors

Unable to import RSA Soft Token file in Workspace App for Android receiving error message: "Token import failed" or “Error code %1$X...

UEFI BIOS Code Error

The vulnerability of UEFI BIOS software in desktop computers, personal computers, and payment devices manufactured by Hewlett-Packard Development Company L.P. is related to code errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

Intel Graphics Driver Synchronization Error

The vulnerability of Intel Graphics Drivers stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Common installation errors with Microsoft Office & how to avoid them

By Owais Sultan If you have bought your products from a genuine Microsoft reseller there won't be any installing issues whatsoever. This is a post from HackRead.com Read the original post: Common installation errors with Microsoft Office & how to avoid them...

FreeRADIUS Information Disclosure Vulnerability

FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management. An information disclosure vulnerability exists in EAP-pwd in FreeRADIU...

JunOS Security Configuration Data Compromise

The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...