Denial of service

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers PCID and TLB flushes...

PT-2019-5144 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.11.x Description: The issue is related to an incompatibility between Process Context Identifiers PCID and shadow-pagetable switching, allowing x86 PV guest OS users to cause a denial of service. This is due to a lack o...

MGASA-2019-0293 Updated xpdf packages fix security vulnerabilities

The updated xpdf packages fix security vulnerabilities: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case. CVE-2019-10018 An issue was discovered in Xpdf 4.01.01. There is an FPE in the function...

COMpfun successor Reductor infects files on the fly to compromise TLS traffic

In April 2019, we discovered new malware that compromises encrypted web communications in an impressive way. Analysis of the malware allowed us to confirm that the operators have some control over the target's network channel and could replace legitimate installers with infected ones on the fly...

DEBIAN-CVE-2019-16738

In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...

F5 BIG-IP and F5 BIG-IP APM Clients Information Disclosure Vulnerability

F5 BIG-IP APM Clients and F5 BIG-IP are both products of F5 Corporation, U.S.A. F5 BIG-IP APM Clients is a suite of APM client software.F5 BIG-IP is an application delivery platform that integrates the functions of network traffic management, application security management and load balancing. An...

Insecure Randomness

Overview org.apereo.cas:cas-server-support-simple-mfa is an is package that allows Apereo CAS to act as a multifactor authentication provider on its own, issuing tokens and sending them to end-users via pre-defined communication channels such as email or text messages. Affected versions of this...

Thousands of Google Calendars Possibly Leaking Private Information Online

"Warning — Making your calendar public will make all events visible to the world, including via Google search. Are you sure?" Remember this security warning? No? If you have ever shared your Google Calendars, or maybe inadvertently, with someone that should not be publicly accessible anymore, you...

CVE-2019-8598

creationtimestamp| type| source ---|---|--- 2019-09-16 12:07:43+00:00| seen| https://t.me/androidMalware/379 2024-09-19 03:49:57+00:00| seen| https://t.me/tengkorakcybercrewz/20649 2024-09-19 03:49:57+00:00| seen| https://t.me/tengkorakcybercrewz/4264...

kernel: nfs: use-after-free in svc_process_common()

A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bcsvcprocess use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and ...

VLC: Multiple vulnerabilities

Background VLC is a cross-platform media player and streaming server. Description Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

Unspecified Vulnerability in GitLab (CNVD-2019-30490)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...

GLSA-201908-26 : libofx: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-26 libofx: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libofx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

CVE-2018-15513

Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role...

CVE-2019-15055

creationtimestamp| type| source ---|---|--- 2019-08-28 02:36:04+00:00| seen| Telegram/47V5cR1nefqmXQ7DYU9a1xbLkni5rPjB4-5s2mhVipZIZU 2019-08-29 13:06:20+00:00| seen| Telegram/o4wu5TbsbYweNMez6uKg20bOiPvN1svfH-6rM8cu5cq-9nc...

CVE-2014-10382

creationtimestamp| type| source ---|---|--- 2019-08-23 00:32:51+00:00| seen| https://t.me/cibsecurity/6326 2019-08-29 16:33:48+00:00| seen| https://t.me/cibsecurity/6443...

GLSA-201908-10 : Oracle JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-10 Oracle JDK/JRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Oracles JDK and JRE software suites. Please review the CVE identifiers referenced below for details. Impact : Please review the...

libarchive: Multiple vulnerabilities

Background libarchive is a library for manipulating different streaming archive formats, including certain tar variants, several cpio formats, and both BSD and GNU ar variants. Description Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced...

glibc: Multiple vulnerabilities

Background glibc is a package that contains the GNU C library. Description Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workarou...

SUSE-SU-2019:2106-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. - CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages bsc1140520. - CVE-2019-13310: Fixed a...