Fedora 28 : leptonica / mingw-leptonica (2018-93a16d053f)

Update to leptonica-1.77.0, see http://www.leptonica.com/source/version-notes.html for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : mingw-openjpeg2 / openjpeg2 (2018-200c84e08a)

This update fixes CVE-2018-18088 and CVE-2018-6616 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : soundtouch (2018-f159412ac7)

Security fix version for CVE-2018-17098 , CVE-2018-17096 and CVE-2018-17097 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : libvorbis (2018-0259281ab6)

The remote Fedora 28 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-0259281ab6 advisory. Sync with git CVE-2017-14160, CVE-2018-10392, CVE-2018-10393, bz1516379 Tenable has extracted the preceding description block directly from the Fedo...

Fedora 28 : xen (2018-5521156807) (Spectre)

Speculative Store Bypass XSA-263, CVE-2018-3639 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

// A proof-of-concept local root exploit for CVE-2017-7308. // Includes a SMEP & SMAP bypass. // Tested on Ubuntu / Linux Mint: // - 4.8.0-34-generic // - 4.8.0-36-generic // - 4.8.0-39-generic // - 4.8.0-41-generic // - 4.8.0-42-generic // - 4.8.0-44-generic // - 4.8.0-45-generic //...

Design/Logic Flaw

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18331

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18331

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-18331

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations...

CVE-2018-1160

creationtimestamp| type| source ---|---|--- 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46048 2018-12-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46034 2019-04-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46675 2019-12-19...

Netatalk OpenSession Remote Code Execution

The Apple Filing Protocol AFP server running on the remote host is affected by a remote code execution vulnerability due to a buffer overflow condition when handling an OpenSession request. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to execute...

Microsoft Releases Out-of-Band Security Updates

Microsoft has released out-of-band security updates to address a vulnerability in Internet Explorer 9, 10, and 11. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The National Cybersecurity and...

Linux Kernel 4.4 - rtnetlink Stack Memory Disclosure Exploit

Exploit for linux platform in category local exploits...

AIX 7.1 TL 5 : solaris (IJ10132)

https://vulners.com/cve/CVE-2017-3623 https://vulners.com/cve/CVE-2017-3623 An unspecified vulnerability in Oracle Sun Systems related to the Solaris Kernel RPC component could allow an unauthenticated attacker to take control of the system. C Tenable Network Security, Inc. The text in the...

Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611)

Executive summary In October 2018, our AEP Automatic Exploit Prevention systems detected an attempt to exploit a vulnerability in the Microsoft Windows operating system. Further analysis led us to uncover a zero-day vulnerability in ntoskrnl.exe. We reported it to Microsoft on October 29, 2018. T...

2019 Security Predictions Report Released

What Makes For Really Good Security Predictions Each year Trend Micro releases its annual Security Predictions Report. Good security predictions are very difficult to develop, and companies and consumers need to be selective about the security advice they take. What makes a good security...

SUSE-SU-2018:4069-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces that is mishandled ...

KLA11388 Multiple vulnerabilities in Microsoft Browsers

Multiple serious vulnerabilities were found in Microsoft Browsers Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Chakra Scripting Engine can be exploited remotely via specially craft...

Google Chrome < 71.0.3578.80 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 71.0.3578.80. It is, therefore, affected by multiple vulnerabilities as referenced in the 201812stable-channel-update-for-desktop advisory. - Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578....