CVE-2019-0572: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0558: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint,...

CVE-2019-0571: Use of Incorrectly-Resolved Name or Reference

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0555: Missing Authorization

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft XmlDocument Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows...

CVE-2019-0583: Undefined Security Weakness

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows...

CVE-2019-0570: Use After Free

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1...

CVE-2019-0549: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...

PT-2019-1125

Name of the Vulnerable Software and Affected Versions: Windows 10 Windows 10 Servers Description: A memory corruption issue exists due to a buffer overflow in the Windows DHCP client. This can be exploited by an attacker sending specially crafted DHCP responses, potentially allowing remote code...

PT-2019-1130

Name of the Vulnerable Software and Affected Versions: Windows Server 2012 R2 Windows RT 8.1 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description: The issue is related to an elevation of privilege in Windows COM Desktop Broker. It is caused by a buffer...

PT-2019-1133

Name of the Vulnerable Software and Affected Versions: Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description: The issue is related to an elevation of privilege vulnerability in the Microsoft...

CVE-2019-0547: Out-of-bounds Write

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers...

New Attack Against Electrum Bitcoin Wallets

This is clever: How the attack works: Attacker added tens of malicious servers to the Electrum wallet network. Users of legitimate Electrum wallets initiate a Bitcoin transaction. If the transaction reaches one of the malicious servers, these servers reply with an error message that urges users t...

[SECURITY] Fedora 29 Update: wget-1.20.1-1.fc29

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

WAS Target Scanning for PCI

This plugin reports http addresses for http and https pages of a scanned system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109394; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/05/24"; scriptnameenglish:"WAS Target Scannin...

Microsoft Windows DNS servers are vulnerable to heap overflow

Overview Microsoft Windows DNS servers are vulnerable to heap overflow attacks, enabling unauthenticated attackers to send malicious requests to affected servers. Description CWE-122: Heap-based Buffer Overflow - CVE-2018-8626Microsoft Windows Domain Name System DNS servers are vulnerable to heap...

Fedora 29 : python-paramiko (2018-ea6b328afd)

Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an authentication bypass in paramiko/authhandler.py. A remote attacker could exploit this vulnerability in Paramiko SSH servers to execute arbitrary code. Note that applications using Paramiko only as a client such as ansible are not...

SUSE SLES12 Security Update : compat-openssl098 (SUSE-SU-2015:0553-1)

OpenSSL was updated to fix various security issues. Following security issues were fixed : - CVE-2015-0209: A Use After Free following d2iECPrivatekey error was fixed which could lead to crashes for attacker supplied Elliptic Curve keys. This could be exploited over SSL connections with client...

PVS vDisk not showing shows no server in size on Second PVS server in the site.

PVS vDisk not showing shows no server in size on Second PVS server in the site. 1. Two PVS servers in site. 2. Both have local storage for the vDisk's 3. Copy the vDisk file from one server to another. 4. Target server shows as No Server under size for the copied vDisk. 5. When checking the...

Denial of Service Vulnerability in Hikvision Video Playback Library SDK

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A denial of service vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the...

Mayday! NASA Warns Employees of Personal Information Breach

Another day, another data breach. This time it's the United States National Aeronautics and Space Administration NASA NASA today confirmed a data breach that may have compromised personal information of some of its current and former employees after at least one of the agency's servers was hacked...