3593 matches found
There is a Skills Shortage, But it isn’t Your Real Problem
During my undergraduate days, I recall hearing that the Bell System was slow to deploy automated dialing. While smaller local phone companies allowed callers to dial a number directly from their phone, the Bell system continues to rely on switchboard operators into the 1930s. In fact, early phone...
PT-2019-6737
Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description The issue concerns a database activity export permission problem. Specifically, the export function of the database activity module exports all entries, including those from groups the user do...
PT-2019-6742
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue concerns a permission problem in Forum Subscriptions. Unenrolled users can subscribe or unsubscribe through the mod/forum/index.php endpoint, specifically the mod/forum/index.php API endpoin...
openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2464)
This update for MozillaThunderbird to version 68.2.1 provides the following fixes : - Security issues fixed bsc1154738 : - CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. - CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB bsc1154738. -...
openSUSE Security Update : MozillaThunderbird (openSUSE-2019-2452)
This update for MozillaThunderbird to version 68.2.1 provides the following fixes : - Security issues fixed bsc1154738 : - CVE-2019-15903: Fixed a heap overflow in the expat library bsc1149429. - CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB bsc1154738. -...
November 12, 2019—KB4525246 (Monthly Rollup)
November 12, 2019—KB4525246 Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes improvements and fixes that were a part of update KB4520013 released October 15, 2019 and addresses the following issues: Addresses an issue...
ACCESS Act might improve data privacy through interoperability
Data privacy is back in Congressional lawmakers’ sights, as a new, legislative proposal focuses not on data collection, storage, and selling, but on the idea that Americans should be able to more easily pack up their user data and take it to a competing service—perhaps one that better respects...
PVS 7.15: Unable to boot/restart target device from PVS
Nothing happens when weboot/restart target device from PVS console. Able to boot/restart machine from Studio...
Updated java-1.8.0-openjdk packages fix security vulnerabilities
The updated packages fix several bugs and some security issues: Missing restrictions on use of custom SocketImpl Networking, 8218573. CVE-2019-2945 Improper handling of Kerberos proxy credentials Kerberos, 8220302. CVE-2019-2949 NULL pointer dereference in DrawGlyphList 2D, 8222690. CVE-2019-2962...
CVE-2019-4409
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...
CVE-2019-4409: Improper Neutralization of Input During Web Page Generation
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the...
PT-2019-17067
Name of the Vulnerable Software and Affected Versions HCL Traveler versions 9.x and earlier Description The issue concerns a cross-site scripting XSS vulnerability. Specifically, on the Problem Report page of the Traveler servlet pages, there is a field for specifying a file attachment to provide...
CVE-2019-17538
Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...
CVE-2019-17538
Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...
CVE-2019-17537: Improper Limitation of a Pathname to a Restricted Directory
Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring...
PT-2019-15195
Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue allows for Directory Traversal, which can be exploited for file deletion. This is achieved through a specific substring in the "web/polygon/problem/deletefile" API endpoint,...
PT-2019-15196
Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue allows for Directory Traversal, enabling file reading via a specific substring in the "web/polygon/problem/viewfile" endpoint, such as "id=1&name=../". Recommendations For...
CVE-2019-17538: Improper Limitation of a Pathname to a Restricted Directory
Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...