Microsoft Windows DHCP Server CVE-2019-0785 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code or cause the DHCP service to become nonresponsive. Technologies Affected Microsoft Windows Server 1803 Microsoft Windows Server 1903 Microsoft Windows...

Security Updates for Microsoft SharePoint Server (July 2019)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of SA...

Security Updates for Exchange (July 2019)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affect...

Security Updates for Microsoft Excel Products (July 2019)

The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Bridge CC, Experience Manager, and Dreamweaver. An attacker could exploit one of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Microsoft Edge Chakra Scripting Engine CVE-2019-1103 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...

Security Bulletin: IBM Multicloud Manager contains sensitive information upon deployment (CVE-2019-4118)

Summary The IBM Multicloud Manager ibm-mcm-chart contains sensitive information upon deployment. Vulnerability Details CVEID: CVE-2019-4118 DESCRIPTION: IBM Multicloud Manager ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment...

Photon OS 1.0: Kubernetes PHSA-2019-1.0-0242

An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Systemd PHSA-2019-2.0-0166

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Envoy PHSA-2019-1.0-0241

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0241. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126478...

Photon OS 1.0: Binutils PHSA-2019-1.0-0242

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Bzip2 PHSA-2019-1.0-0242

An update of the bzip2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0242. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid126471...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20190702)

Security Fixes : - QEMU: Slirp: information leakage in tcpemu due to uninitialized stack variables CVE-2019-9824 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid126455; scriptversion"1.4";...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...

Android July 2019 Security Update Patches 33 New Vulnerabilities

Google has started rolling out this month's security updates for its mobile operating system platform to address a total of 33 new security vulnerabilities affecting Android devices, 9 of which have been rated critical in severity. The vulnerabilities affect various Android components, including...

Photon OS 3.0: Linux PHSA-2019-3.0-0009

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126378;...

Photon OS 3.0: Python2 PHSA-2019-3.0-0009

An update of the python2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126380;...

Photon OS 3.0: Python PHSA-2019-3.0-0009

An update of the python package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126379;...

FreeBSD : Django -- Incorrect HTTP detection with reverse-proxy connecting via HTTPS (b805d7b4-9c0c-11e9-97f0-000c29e96db4)

Django security releases issued : When deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme would incorrectly detect client requests made via HTTP as using HTTPS. This entails incorrect results for issecure, and buildabsoluteuri, and that HTTP requests...

Photon OS 3.0: Libseccomp PHSA-2019-3.0-0009

An update of the libseccomp package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126376;...