The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause downtime or service failures through the use of MySQL network protocols...

CVE-2019-2977

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

CVE-2019-2988

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2019-2977

Vulnerability in the Java SE product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...

Ubuntu: Security Advisory (USN-4115-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4115-1: Linux kernel vulnerabilities

Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2018-19985 Zhipeng Xie discovered that an...

The vulnerability of the Trace File Analyzer (TFA) Collector utility, a clustering application for Oracle Clusterware, allows a malicious individual to gain unauthorized access to protected data or cause partial service failure.

The vulnerability of the Trace File Analyzer TFA Collector utility, a tool for clustering Oracle Clusterware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data or cause partial service failure through...

Code injection

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Whonix v15 - Anonymous Operating System

Whonix is an operating system focused on anonymity, privacy and security. It’s based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user’s real IP. Whonix consists of two parts: One...

Privilege Escalation

MySQL is vulnerable to denial of service Dos attacks. A low privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in unauthorized update, insert or delete access to some of MySQL Server accessible data...

Arbitrary Code Execution

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 collection provide a stable release of Python 2.7 with a number of additional utilities and database connectors f...

The vulnerability of the Libraries component in Oracle Java SE and Java SE Embedded software platforms allows a attacker to cause a service failure.

The vulnerability of the Libraries component in Oracle Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using network protocols...

CVE-2019-2698

Vulnerability in the Java SE component of Oracle Java SE subcomponent: 2D. Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

PT-2019-2008 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.25 and prior MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subcomponent. It allows a...

[SECURITY] Fedora 28 Update: remmina-1.3.3-1.fc28

Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...

The vulnerability of the Server component of the Oracle MySQL database management system allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data or cause service failures using network...

The vulnerability of the Server component of the Oracle MySQL database management system allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Server component of the Oracle MySQL database management system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using network protocols...

The vulnerability of the RsaKeyPairGenerator::getNumberOfIterations() method in the Bouncy Castle library allows a hacker to gain unauthorized access to protected data.

The vulnerability of the RsaKeyPairGenerator::getNumberOfIterations method in the Bouncy Castle library is related to deficiencies in the use of cryptographic keys. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data using network protocols such as...

Denial Of Service (DoS)

python is vulnerable to denial of service. It was discovered that multiple Python standard library modules implementing network protocols such as httplib or smtplib failed to restrict the sizes of server responses. A malicious server could cause a client using one of the affected modules to consu...

PT-2019-4184 · Libpng Developers +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng version 1.6.36 Description: The issue is related to a memory leak in the png create info struct function in libpng. This leak occurs as demonstrated by pngcp. A third party has stated that they do not think it is libpng's job to free...