SUSE-SU-2019:1644-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 5 Fix Pack 35. Security issues fixed: - CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes bsc1134718. - CVE-2019-2698: Fixed out of bounds access flaw in the 2D component bsc1132729. -...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2019-1906

A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure PI could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could...

The vulnerability of Pelco Endura video server microprogramming software, related to access control errors, allows intruders to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Pelco Endura video server microprogramming software is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected information by using specially...

The vulnerability of the Python script subsystem of the NX-OS network operating system allows a hacker to execute arbitrary commands and increase their privileges.

The vulnerability of the Python script subsystem in the NX-OS network operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands and increase their privileges...

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in access control mechanisms, allows a intruder to trigger a service failure or alter the controller’s configuration.

The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in the access control mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures or modify the controller’s configuration using the Ethernet/IP protocol...

The vulnerability of the software for updating Intel Driver & Support Assistant, related to access control deficiencies, allows a hacker to disclose protected information.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

Intel ITE Tech* Consumer Infrared Driver Privilege Permission and Access Control Issues Vulnerability

Intel ITE Tech Consumer Infrared Driver is a Consumer Infrared CIR driver for Intel NUCs from Intel Corporation USA. The Intel ITE Tech Consumer Infrared Driver is vulnerable to privilege permission and access control issues. An attacker could exploit this vulnerability to elevate privileges...

The vulnerability of the NuGet package management system, related to deficiencies in access control, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the NuGet package management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information by modifying the intermediate build directory...

The vulnerability of the Microsoft Azure Active Directory Connect software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft Azure Active Directory Connect software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the microprogrammed logic controllers from Modicon, related to access control errors, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the programmable logic controller Modicon’s microprogramming software is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures or execute arbitrary code by modifying the controller’s configuration using the Modbus...

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software, related to access control errors, allows intruders to modify the devices.

The vulnerability of Siemens LOGO!8 BM programmable logic controller’s microprogramming software is related to access control errors. Exploiting this vulnerability allows an attacker to remotely reprogram the device and obtain the project file using port 10005/TCP...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the Win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

Adobe Issues Critical Patches for ColdFusion, Flash Player, Campaign

It's Patch Tuesday week! Adobe has just released the latest June 2019 software updates to address a total 11 security vulnerabilities in its three widely-used products Adobe ColdFusion, Flash Player, and Adobe Campaign. Out of these, three vulnerabilities affect Adobe ColdFusion, a commercial rap...

Critical Flaws in Amcrest HDSeries Camera Allow Complete Takeover

Two critical severity bugs have been publicly disclosed that impact Amcrest HDSeries model IPM-721S cameras. Both vulnerabilities open the consumer-grade $50 Wi-Fi cameras to complete takeover by remote, unauthenticated attackers. Mandar Satam, senior security researcher at Synopsys, found the si...

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine involve access control flaws, allowing attackers to enhance their privileges.

The vulnerabilities of Intel Converged Security and Manageability Engine and Intel Trusted Execution Engine are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data, allowing attackers to escalate their privileges.

The vulnerability of the Intel Active Management Technology remote access implementation exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Edge’s vulnerability, related to access control deficiencies, allows attackers to elevate their privileges and escape from the isolated software environment.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and escape from the isolated software environment known as AppContainer...

Nvidia Fixes High-Severity Flaws in GeForce Experience for Gamers

Nvidia, which makes gaming-friendly graphics processing units GPUs, has patched two high-severity flaws in its GeForce Experience software, which could allow denial of service, information disclosure and privilege escalation on impacted systems. GeForce Experience is software for gamers utilizing...