UBUNTU-CVE-2018-19475

psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same...

The vulnerability in the web interface of the Juniper Networks Junos Space Security Director arises from insufficient protection of the web page structure, allowing attackers to disclose sensitive information or perform actions on behalf of other users.

The vulnerability of the Juniper Networks Junos Space Security Director administrative interface arises due to insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform actions on behalf of other users...

The vulnerability of the OpenNMS monitoring system, a network management platform from Juniper Networks Junos Space, arises due to insufficient protection of the website structure. This allows attackers to disclose protected information or perform actions on behalf of the administrator.

The vulnerability of OpenNMS, which is included in the Juniper Networks Junos Space network management platform, stems from insufficient protection of the website structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out actions on behalf ...

CentOS 7 : fuse (CESA-2018:3324)

An update for fuse is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2018-8589

creationtimestamp| type| source ---|---|--- 2018-11-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=340 2018-11-14 09:20:46+00:00| exploited| https://t.me/SecLabNews/3622 2018-11-14 09:28:17+00:00| seen| https://t.me/ctinow/4804 2018-11-14 12:59:31+00:00|...

PT-2018-3379

Name of the Vulnerable Software and Affected Versions: ADEM CAD/CAM/CAPP affected versions not specified Description: The issue is caused by a buffer overflow in the adem2d.dll library of the ADEM CAD/CAM/CAPP system. This can allow a local attacker to modify the program's address space,...

PT-2018-2505

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.26 Description The issue is related to a lack of available stack space check in the psi/zdevice2.c code of the Ghostscript software suite when the output device remains unchanged. This can be exploited b...

Embracing the Cybersecurity ‘Grey Space’

It is just as tiring for security teams to keep saying “No” as it is for every other department to keep hearing it. To preserve some level of smooth operations in an organization, security teams need to find a way to let employees move data around while still protecting digital assets like IP and...

DEBIAN-CVE-2018-18897

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

F5 Networks BIG-IP : tmsh utility vulnerability (K28003839)

A BIG-IP user granted with tmsh access may cause the BIG-IP system to experience denial-of-service DoS when the BIG-IP user uses the tmsh utility to run the editcli preference commandand proceeds to savethe changes to another filename repeatedly. This actionutilizes storage space on the /var...

UBUNTU-CVE-2018-18897

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo...

Command injection

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tmsh access may caus...

RHEL 7 : fuse (RHSA-2018:3324)

An update for fuse is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space

A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udlfb.c:udlfbmmap function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages,...

Remote Code Execution (RCE)

salt is vulnerable to remote code execution RCE attacks. The vulnerability exists due to the improper processing of spaces in the file path which may allow RCE attacks...

PT-2018-6810

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A Description: A secure app running in a non-secure space ca...

SUSE SLES12 Security Update : perl (SUSE-SU-2018:1972-2)

This update for perl fixes the following issues : These security issue were fixed : CVE-2018-6913: Fixed space calculation issues in pppack.c bsc1082216. CVE-2018-6798: Fixed heap buffer overflow in regexec.c bsc1082233. CVE-2018-6797: Fixed sharp-s regexp overflow bsc1082234. CVE-2018-12015: The...

Loading JS from user space where the username is not a registered account is dangerous and should be banned

More info at https://phabricator.wikimedia.org/T207603...

OpenNMS Cross-Site Scripting Vulnerability (CNVD-2018-21611)

Juniper Junos Space is a suite of network management solutions from Juniper Networks that supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. OpenNMS is a network management system that automates the configuration, monitoring, and...

CVE-2018-0063

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...