1616 matches found
virt:rhel bug fix update
Bug Fixes: AlmaLinux8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain kvm BZ1764829 HPE 8.1 BUG Icelake: KVM missing .pconfig BZ1775133 Failed to create a VM via virt-manager or web console in AlmaLinux8.1 snapshot-2.1 BZ1775134 Intel 8.2 Bug Icelake-Server host,...
CVE-2019-2329: Use After Free
Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845,...
CVE-2019-1234
A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'...
Description of the security update for Office 2016: November 12, 2019 (KB4484113)
None None...
Design/Logic Flaw
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts...
CVE-2019-8118
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts...
CVE-2019-8118: Cleartext Storage of Sensitive Information
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts...
Kernel update: New kernel 2.6.32-042stab140.4 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0
This update provides a new kernel 2.6.32-042stab140.4 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 based on the RHEL 6.10 kernel 2.6.32-754.18.2.el6. The new kernel includes stability and usability fixes. Vulnerability id: PSBM-97313 Kernel could crash with "BUG at...
CVE-2019-17205: Improper Neutralization of Input During Web Page Generation
TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...
How To Troubleshoot And Fix The Situation When The ADM HA Is Not Working
One of the possible error conditions reported in the deployment is where in the GUI System - Deployment the following symptoms are reported: Heartbeats are not received from the secondary Data synchronization has failed on secondary Apart of the information displayed in GUI on primary node, there...
USN-4104-1 nova vulnerability
Donny Davis discovered that the Nova Compute service could return configuration or other information in response to a failed API request in some situations. A remote attacker could use this to expose sensitive information...
QxSearch hijacker fakes failed installs
Recently, one of the more dominant search hijacker families on our radar has started to display some curious behavior. The family in question is delivered by various Chrome extensions and classified as PUP.Optional.QxSearch because of its description in listings of installed extensions, which tel...
CVE-2019-14194
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfsreadreply when calling storeblock in the NFSv2 case...
UBUNTU-CVE-2019-14198
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfsreadreply when calling storeblock in the NFSv3 case...
CVE-2019-14196: Out-of-bounds Write
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfslookupreply...
DEBIAN-CVE-2019-13351
posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 as distributed with alsa-plugins 1.1.7 and later has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which...
UBUNTU-CVE-2019-13351
posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 as distributed with alsa-plugins 1.1.7 and later has a "double file descriptor close" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which...
Information Disclosure
jenkins is vulnerable to information disclosure. The vulnerability exists as the loadUserByUsername function allows users to determine if a user exists through failed login attempts...
MailCarrier 2.51 - POP3 USER Buffer Overflow
MailCarrier 2.51 - POP3 USER Buffer Overflow !/usr/bin/python Exploit Title: MailCarrier 2.51 - Remote Buffer Overflow in "USER" commandPOP3 Date: 14/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.tabslab.com/ Version: 2.51 Software Link: N.A Contact:...
