The vulnerability of the FTP protocol implementation that supports Kerberos authentication, as provided by the libcurl library, relates to the reallocation of memory. This vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FTP protocol implementation that supports Kerberos authentication, when using the libcurl library, is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of Intel microprocessor microprogramming software, which arises due to insufficient testing of input data, allows a hacker to trigger a service failure.

The vulnerability of Intel microprocessor microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system...

The vulnerability of the RPC call handlers of VMware Workstation and VMware Fusion hypervisors allows a attacker to cause a service failure.

The vulnerability of RPC call handlers in VMware Workstation and VMware Fusion hypervisors is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of Intel WIFI drivers, related to operations beyond the buffer in memory, allows attackers to escalate their privileges, cause service failures, and expose sensitive information.

The vulnerability of Intel WIFI drivers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to incorrect default access rights settings, which allow a malicious actor to trigger a service failure and expose protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow a hacker to cause service failures and expose sensitive information...

The vulnerability of the Baseboard Management Controller, a controller for remote control of a computer, arises from operations that go beyond the buffer in memory. This allows attackers to disclose sensitive information, enhance their privileges, or cause system failures.

The vulnerability of the Baseboard Management Controller for remote control involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, enhance their privileges, or cause service failures...

Streamlining and Automating Compliance

There are seemingly countless regulatory and industry frameworks out there that organizations have to navigate and comply with. SOX Sarbanes-Oxley, PCI-DSS Payment Card Industry Data Security Standard, GDPR General Data Protection Regulation, HIPAA Health Insurance Portability and Accountability...

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures when the WINDOWUPDATE message is not sent to the connection window thread 0...

The vulnerability of Firefox browsers arises due to insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Firefox browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures by using specially created URIs...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

SUSE SLES12 Security Update : squid (SUSE-SU-2019:3067-1)

This update for squid to version 4.9 fixes the following issues : Security issues fixed : CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326...

SUSE-SU-2019:3067-1 Security update for squid

This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. - CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326. -...

CVE-2019-15972

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. ...

The vulnerability of the Jetty HTTP server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Jetty HTTP server is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service failures by sending containers containing SETTINGs, or multiple SETTINGs...

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Intel Active Management Technology AMT-powered microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor license manager allows a violator to trigger a service failure.

The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor management system is related to the possibility of deleting elements from the lmadmin service. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Siemens’ software and hardware devices, related to the possibility of disrupting time synchronization (IRT), allows a perpetrator to trigger a service failure.

The vulnerability of Siemens’ software and hardware devices is related to the possibility of disrupting time synchronization IRT. Exploiting this vulnerability can allow a remote attacker to cause service failures...

openSUSE Security Update : squid (openSUSE-2019-2540)

This update for squid to version 4.9 fixes the following issues : Security issues fixed : - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. - CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326. -...

openSUSE Security Update : squid (openSUSE-2019-2541)

This update for squid to version 4.9 fixes the following issues : Security issues fixed : - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi bsc1140738. - CVE-2019-12526: Fixed potential remote code execution during URN processing bsc1156326. -...

Security update for squid (important)

openSUSE Security Update: Security update for squid Announcement ID: openSUSE-SU-2019:2541-1 Rating: important References: 1133089 1140738 1141329 1141330 1141332 1141442 1156323 1156324 1156326 1156328 1156329 Cross-References: CVE-2019-12523 CVE-2019-12525 CVE-2019-12526 CVE-2019-12527...