KLA11470 Multiple vulnerabilities in Oracle Java SE

Multiple vulnerabilities were found in Oracle Java SE. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Vulnerability in Windows DLL component of Java SE can be exploited remotely to bypass security restrictions; 2...

PT-2019-1945

Name of the Vulnerable Software and Affected Versions Java SE versions 7u211, 8u202, 11.0.2, and 12 Java SE Embedded version 8u201 Description The issue is related to insufficient access controls in the Libraries component of Oracle Java SE and Java SE Embedded. It can be exploited by a remote...

[SECURITY] Fedora 28 Update: kernel-headers-5.0.7-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

CVE-2019-0809

A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library DLL files, aka 'Visual Studio Remote Code Execution Vulnerability'...

[SECURITY] Fedora 28 Update: kernel-headers-5.0.6-100.fc28

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

CVE-2019-10844

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

Code injection

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

PYSEC-2019-37

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

PYSEC-2019-107

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

CVE-2019-10844

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

CVE-2019-10844

CVE-2019-10844 affects Sony Neural Network Libraries (nnabla) – nbla/logger.cpp in libnnabla.a up to v1.0.14. The root cause is that code relies on the HOME environment variable, which is untrusted, enabling potential influence on behavior via the user’s HOME value. Public references in Red Hat a...

CVE-2019-10844

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

CVE-2019-10844

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

[SECURITY] Fedora 29 Update: golang-googlecode-go-crypto-0-0.28.20190324gitb7391e9.fc29

Supplementary Go cryptography libraries...

[SECURITY] Fedora 28 Update: golang-googlecode-go-crypto-0-0.25.20190324gitb7391e9.fc28

Supplementary Go cryptography libraries...

PT-2019-12048

Name of the Vulnerable Software and Affected Versions Sony Neural Network Libraries aka nnabla versions prior to 1.0.14 Description The issue arises from the reliance on the HOME environment variable, which might be untrusted, in the nbla/logger.cpp file within libnnabla.a. This could potentially...

PT-2019-20129

Name of the Vulnerable Software and Affected Versions Sony Neural Network Libraries nnabla versions prior to v1.0.15 Description The issue relies on the HOME environment variable, which might be untrusted, potentially leading to security concerns. Recommendations For versions prior to v1.0.15,...

CVE-2019-10844: Undefined Security Weakness

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries aka nnabla through v1.0.14 relies on the HOME environment variable, which might be untrusted...

CVE-2018-4408

A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

Ubuntu 14.04 LTS : Firebird vulnerabilities (USN-3929-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3929-1 advisory. It was discovered that Firebird incorrectly handled certain malformed packets. A remote attacker could possibly use this issue with a specially crafted...