CLSA-2024-1734708244 Fix of 15 CVEs

OpenJDK 11.0.25 release, build 9. - CVE-2024-21131, CVE-2024-21138, CVE-2024-21140, CVE-2024-21144, CVE-2024-21145, CVE-2024-21147, CVE-2024-21208, CVE-2024-21210, CVE-2024-21217, CVE-2024-21235. - Release notes: https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-October/038512.html -...

User does not get commission

Lines of code Vulnerability details Impact If Auctioned Vault debt is cleared from external source depositing extra collateral, auction can be cancelled prematurely. In this case auctioneer loses his commission. User must be given commission once auction starts at auctionStarted. Note Also it see...

korydor.in.ua Improper Access Control vulnerability OBB-2220127

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora 31 : xen (2020-6dd36a716c)

revised patch for XSA-286 mitigating performance impact ---- x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286, CVE-2020-27674 1891092 ---- x86: Race condition in Xen mapping code XSA-345 undue deferral of IOMMU TLB flushes XSA-346 unsafe AMD IOMMU page table updates XSA-347 No...

sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3Atoi64

Detailed Report: https://oss-fuzz.com/testcase?key=5200300586303488 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3Atoi64 computeNumericType numericType...

Week in Security (August 7 – August 13)

Last week, we explained how security certificates work and how malware authors have used them to block security software from being downloaded and executed. We also showed how the Magnitude exploit kit is spreading a Cerber ransomware variant that uses binary padding in an attempt to get skipped,...

Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data

A controversial bill that would allow organizations that have been breached to hack back has undergone revisions that include an exemption permitting victims to recover or destroy their data on an attacker’s infrastructure. Rep. Tom Graves R-GA introduced the updated Active Cyber Defense Certaint...

Threat Outbreak Alert RuleID26464: Email Messages Distributing Malicious Software on November 22, 2016

Medium Alert ID: 49835 First Published: 2016 November 22 16:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26464 may contain the following files: Name |...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

Threat Outbreak Alert RuleID24845: Email Messages Distributing Malicious Software on September 8, 2016

Medium Alert ID: 48777 First Published: 2016 September 6 14:02 GMT Last Updated: 2016 September 8 19:39 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID2484...

Threat Outbreak Alert RuleID23765: Email Messages Distributing Malicious Software on July 6, 2016

Medium Alert ID: 47011 First Published: 2016 July 6 18:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23765 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID18397: Email Messages Distributing Malicious Software on October 2, 2015

Medium Alert ID: 41311 First Published: 2015 October 1 15:10 GMT Last Updated: 2015 October 5 13:30 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18397 an...

Threat Outbreak Alert RuleID13134: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 37030 First Published: 2015 January 16 17:07 GMT Last Updated: 2015 July 7 13:09 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13134 and...

Solaris 10 (x86) : 148871-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...

postgresql security update

8.4.7-1.el60.1 - Update to PostgreSQL 8.4.7, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-7.html http://www.postgresql.org/docs/8.4/static/release-8-4-6.html including the fix for CVE-2010-4015 Resolves: 672634 8.4.5-1.el60.2 - Ensure we don't package any...

HP-UX Update for CDE dtspcd HPSBUX00175

Check for the Version of CDE dtspcd OpenVAS Vulnerability Test HP-UX Update for CDE dtspcd HPSBUX00175 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

xpdf security update

3.00-20.el4 - Resolves: 490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for some potential problems, latest upstream patch 3.00-19.el4 - Resolves: 490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 revised patch that adds a fix for badpage10910.pdf 3.00-18.el4 -...

[SECURITY] [DSA 1444-2] New php5 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1444-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23, 2008 http://www.debian.org/security/faq -...

Important: krb5 security update

1.5-29 - update to revised patch for CVE-2007-3999...

Anonymous Mail Forwarding Vulnerabilities in FormMail 1.9

A more easy-on-the-eyes Postscript version of the following advisory may be viewed at: http://www.monkeys.com/anti-spam/formmail-advisory.ps An entertaining working demonstration of a 100 client-side Javascript exploit for older and already well-known FormMail 1.6 version security flaws may be...