9208 matches found
CVE-2018-15755
CVE-2018-15755 affects Cloud Foundry CF Networking Release (versions prior to 2.16.0, specifically 2.11.0–2.15.0). The internal API endpoint between Diego cells and the policy server is vulnerable to SQL injection. A remote attacker with mTLS certificates and valid authentication can issue arbitr...
CVE-2018-15755 CF networking internal policy server SQL injection
Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server...
Threatpost News Wrap Podcast For Oct. 12
Threatpost editors Lindsey O’Donnell and Tara Seals discuss the top news of the week ended Oct. 12. The week started with a bang with a report that Google did not disclose a potential data breach in Google+, likely contributing to the tech giant’s decision to shut down the social networking...
CVE-2018-8493
An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers...
October 9, 2018—KB4462926 (Monthly Rollup)
None None...
October 9, 2018—KB4462919 (OS Build 17134.345)
None None...
October 9, 2018—KB4462918 (OS Build 16299.726)
None None...
CVE-2018-15368
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...
CVE-2018-0434
A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...
CVE-2018-15755: - CF networking internal policy server SQL injection | Cloud Foundry
Severity Medium Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions You are using cf-networking-release versions prior to 2.16.0 Description Cloud Foundry CF-Networking, versions 2.11.0 through 2.15.0, contain an internal api endpoint vulnerable to SQL injection between...
The Facebook Security Meltdown Exposes Way More Sites Than Facebook
The social networking giant confirmed Friday that sites you use Facebook to login to could have been accessed as a result of its massive breach...
Fancy Bear’s VPNfilter malware is back with 7 new modules
By Waqas Cisco’s Talos researchers have identified that Russia’s VPNfilter is way more dangerous than it is believed to be. The malware, which prompted the FBI to urge people to reboot their internet routers, contains seven additional third-stage modules that are infecting countless global...
Moderate: Red Hat Security Advisory: openstack-neutron security and bug fix update
An update for openstack-neutron is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Moderate: Red Hat Security Advisory: openstack-neutron security update
An update for openstack-neutron is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: qemu-kvm
Issue Overview: A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process...
September 11, 2018—KB4457145 (Security-only update)
None None...
September 11, 2018—KB4457144 (Monthly Rollup)
None None...
September 11, 2018—KB4457140 (Security-only update)
None None...