7522 matches found
OPENSUSE-SU-2019:0081-1 Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306,...
Android Q — Google Adds New Mobile Security and Privacy Features
Google has recently released the first beta version of Android Q, the next upcoming version of Google's popular mobile operating system, with a lot of new privacy improvements and other security enhancements. Android Q, where Q has not yet been named, offers more control over installed apps, thei...
SUSE-SU-2019:0628-1 Security update for galera-3, mariadb, mariadb-connector-c
This update for mariadb, galera-3, mariadb-connector fixes the following issues: Security vulnerabilities addressed for mariadb: - CVE-2016-9843 bsc1013882 - CVE-2018-3058 bsc1101676 - CVE-2018-3060 - CVE-2018-3063 bsc1101677 - CVE-2018-3064 bsc1103342 - CVE-2018-3066 bsc1101678 - CVE-2018-3143...
Xen Project Process Context Identifiers Shadow Pagetables Denial of Service Vulnerability (XSA-294)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. Only x86 systems are affected. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware...
Xen Project Process Context Identifiers TLB Flushing Multiple Vulnerabilities (XSA-292)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities including denial of service, information disclosure, and privilege escalation. Only x86 systems are affected. Note that Nessus has checked the changeset versions...
The vulnerability of the Jenkins automation server allows a hacker to reuse registration data or session identifiers for authentication purposes.
The vulnerability of the Jenkins automation server is related to incorrect session duration. Exploiting this vulnerability allows a malicious actor to repeatedly use registration data or session identifiers for authentication purposes...
CVE-2019-0192
creationtimestamp| type| source ---|---|--- 2019-03-08 00:21:31+00:00| seen| https://t.me/cibsecurity/2944 2019-03-28 18:42:31+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5335 2019-03-28 21:42:52+00:00| published-proof-of-concept| https://t.me/antichat/4215 2019-09-13...
PT-2019-11330 · Jenkins · Jenkins Azure Vm Agents Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Azure VM Agents Plugin versions 0.8.0 and earlier Description: An information exposure issue exists that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. This is due to a...
The vulnerability of the software platform for managing administrative policies and privileges, Policykit, arises from errors in processing large user identifier values, allowing attackers to bypass authentication procedures.
The vulnerability of the software platform for managing administrative policies and privileges via Policykit is related to errors in processing large user identifier values values exceeding INTMAX, which allows any systemctl command to be executed. Exploiting this vulnerability could enable a...
CVE-2019-5766
Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
USN-3876-1 avahi vulnerabilities
Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. CVE-2017-6519, CVE-2018-1000845...
The vulnerability of the JunOS operating system allows attackers to carry out attacks using predictable IP IDs.
The vulnerability of the JunOS operating system is related to the predictability of port IP IDs. Exploiting this vulnerability allows a remote attacker to carry out attacks using predictable IP IDs...
SUSE-SU-2019:0138-1 Security update for wireshark
This update for wireshark to version 2.4.12 fixes the following issues: Security issues fixed: - CVE-2019-5717: Fixed a denial of service in the PMUL dissector bsc1121232 - CVE-2019-5718: Fixed a denial of service in the RTSE dissector and other dissectors bsc1121233 - CVE-2019-5719: Fixed a deni...
USN-3861-1 policykit-1 vulnerability
It was discovered that PolicyKit incorrectly handled certain large user UIDs. A local attacker with a large UID could possibly use this issue to perform privileged actions...
SUSE-SU-2019:0092-1 Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382, CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306,...
SUSE-SU-2019:0059-1 Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.22.4 fixes the following issues: Security issues fixed: CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...
GHSA-M9MQ-P2F9-CFQV Bleach URI Scheme Restriction Bypass
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized...
CVE-2017-1882
creationtimestamp| type| source ---|---|--- 2018-12-29 11:37:27+00:00| seen| MISP/5c275bae-8c6c-4d62-8630-4e8902de0b81 2019-01-02 15:46:36+00:00| seen| MISP/5c2cdad0-9338-4c4b-87bc-2be2ac12042b...