Moderate severity vulnerability that affects org.keycloak:keycloak-core

keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the...

[SECURITY] Fedora 27 Update: calamares-3.1.8-2.fc27.1

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

CVE-2018-7928

There is a security vulnerability which could lead to Factory Reset Protection FRP bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new on...

Description of the security update for Word Viewer: October 9, 2018

None None...

Description of the security update for Office 2010: October 9, 2018

Description of the security update for Office 2010: October 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Excel 2016: October 9, 2018.

None None...

MS11-025: Description of the security update for Visual C++ 2010 Service Pack 1: August 9, 2011

None None...

Huawei Mobile Cloud Space APP FRP Bypass Vulnerability

Huawei Cloud Space is an APP application from Huawei. The Huawei Cloud Space App installed on some Huawei phones suffers from a mobile FRP bypass vulnerability. An attacker can use this vulnerability to replace an old account with a new one through specific steps during the process of resetting t...

Compatibility update for upgrading to Windows 10, version 1803: October 9, 2018

None None...

The compatibility subsystem’s vulnerability allows for the execution of Linux applications on Windows operating systems, enabling attackers to replace or delete any files they desire.

The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in character registry handling. Exploiting this vulnerability allows an attacker to replace or delete any files using a specially created application...

CVE-2018-14732

An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR Hot Module Replacement. Anyone can receive the HMR message sent by the WebSocket...

CVE-2018-14731

An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR Hot Module Replacement. Anyone can receive the HMR message sent by the WebSocket server via a...

Code injection

An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR Hot Module Replacement. Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/...

Code injection

An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR Hot Module Replacement. Anyone can receive the HMR message sent by the WebSocket server via a...

PT-2018-12689 · Webpack · Webpack-Dev-Server

Name of the Vulnerable Software and Affected Versions: webpack-dev-server versions prior to 3.1.10 webpack-dev-server versions prior to 3.1.6 Description: An issue in the WebSocket server used for Hot Module Replacement HMR allows attackers to steal a developer's source code because the origin of...

The vulnerability of Emerson DeltaV DCS industrial control stations, related to errors in checking the path to the catalog, allows a intruder to replace the executable files.

The vulnerability of Emerson DeltaV DCS industrial control systems lies in errors during the verification of the catalog path. Exploiting this vulnerability allows a malicious actor to replace the executable files...

Scientific Linux Security Update : Moderate: OpenAFS on SL6.x, SL7.x i386/x86_64 (20180911)

These releases include fixes for three security advisories, OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, and OPENAFS-SA-2018-003. OPENAFS-SA-2018-001 only affects deployments that run the 'butc' utility as part of the in-tree backup system, but is of high severity for those sites which are affected ...

Description of the security update for Excel 2010: September 11, 2018

Description of the security update for Excel 2010: September 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for Excel 2013: September 11, 2018

Description of the security update for Excel 2013: September 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4457029)

Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 KB 4457029 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when .NET Framework processes untrusted input. An attacker who successfully...