3993 matches found
openSUSE Security Update : osc (openSUSE-2019-1844)
This update for osc to version 0.165.4 fixes the following issues : Security issue fixed : - CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack bsc1142518. Non-security issues fixed : - support different token operations runservice, release and rebuild...
Nextcloud: Content Spoofing /Text Injection in https://docs.nextcloud.com
Hello Team, I have found a Content Spoofing / Text Injection on this domain https://docs.nextcloud.com Go to https://docs.nextcloud.com/!!!ATENTION!%20This%20server%20is%20on%20Maintenance%20please%20go%20to%20WWW.EVIL.COM%20%20%20%20%20%20% 20% 20% 20% 20% 20% 20% 20% 20% 20% 20% 20% 20% 20% 20%...
Introducing EQR — The Need for Petabyte-Scale Real-Time Analysis
Making Fast Decisions from Lots of Data One of the most difficult things to solve for in the Security industry is scale. Security is essentially a big data problem—data that is dynamic, and variadic. You need to correlate lots of disparate data elements that contain dynamically changing parameter...
DRUPAL-CONTRIB-2019-058
This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks. The module doesn't sufficiently check for a site being in maintenance mode. This vulnerability is mitigated by the fact that the sit...
Metatag - Moderately critical - Information disclosure - SA-CONTRIB-2019-058
This module enables you to customize meta tags to help with a site's search engine ranking and improve the display of page summaries when shared on social networks. The module doesn't sufficiently check for a site being in maintenance mode. This vulnerability is mitigated by the fact that the sit...
Security Bulletin: [All] IBM DB2 (Publicly disclosed vulnerability) shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise
Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about some security vulnerabilities affecting IBM DB2 has been published in their respective security bulletins. CVE-2019-4322...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality
Summary IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. CVE-2019-4322 CVE-2019-4386 CVE-2019-4154 CVE-2019-4102 CVE-2019-4101 CVE-2019-4057 Vulnerability Details Refer to the securi...
SUSE-SU-2019:1810-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing bsc1138034. - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators bsc1134689. Bug fixes: ...
USN-4049-2 glib2.0 vulnerability
USN-4049-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this iss...
The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.
The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...
The vulnerability in the implementation of 3D-acceleration functions for hypervisors such as VMware ESXi, VMware Fusion, and Vmware Workstation allows attackers to exploit it to disclose sensitive information or cause system failures during maintenance.
The vulnerability of the 3D-acceleration function implementation in VMware ESXi, VMware Fusion, and Vmware Workstation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause system failur...
The vulnerability of the microprogrammed logic controller Modicon Quantum, related to errors in code generation, allows a intruder to unauthorizedly modify the built-in software and cause malfunctions during maintenance.
The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in code generation. Exploiting this vulnerability allows an intruder to unauthorizedly modify the built-in software and cause malfunctions using the Modbus protocol...
The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during maintenance operations when reading invalid blocks of physical memory in the controller using the Modbus...
USN-4014-2 glib2.0 vulnerability
USN-4014-1 fixed a vulnerability in GLib. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information...
The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.
The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted MPLS OAM packets...
CVE-2019-5394
The HPE Nonstop Maintenance Entity family of products are vulnerable to local disclosure of information, such as system layout and configuration...
CVE-2019-5394
The HPE Nonstop Maintenance Entity family of products are vulnerable to local disclosure of information, such as system layout and configuration...
Design/Logic Flaw
The HPE Nonstop Maintenance Entity family of products are vulnerable to local disclosure of information, such as system layout and configuration...
CVE-2019-5394
CVE-2019-5394 affects the HPE Nonstop Maintenance Entity family. The vulnerability allows local disclosure of information (e.g., system layout and configuration). According to the provided data, the impact includes partial confidentiality and partial integrity, with complete availability impact, ...
