Red Hat Ceph Unauthorized Access Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

CVE-2018-3303

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite subcomponent: EM Console. Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

UBUNTU-CVE-2019-2532

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26678)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server component of Oracle MySQL, version 5.7.24 and earlier, and the Server: Security: Privileges...

UBUNTU-CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

DEBIAN-CVE-2018-16846

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices...

Timing Attack

libgnutls.so is vulnerable to timing attacks. A malicious user could statistically analyze the timing data by sending packets to the application, conducting an attack similar to the "Lucky Thirteen" attack...

Timing Side- Channel Attack

OpenSSL is vulnerable to timing attacks. It happens because of lack of validation of MAC addresses in constant time during the processing of a malformed CBC padding. It is also known as "Lucky Thirteen" issue...

Apple macOS High Sierra AMD Out-of-Bounds Read Vulnerability (CNVD-2019-01532)

Apple macOS High Sierra is a suite of specialized operating systems developed for Mac computers by Apple, Inc. AMD is one of the AMD product components. An out-of-bounds read vulnerability exists in AMD in Apple macOS High Sierra version 10.13.4. A local attacker could exploit the vulnerability t...

PT-2019-1320 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.13 and prior Description: The issue is related to a vulnerability in the InnoDB component of Oracle MySQL Server, which can be exploited by a high-privileged attacker with network access via multiple protocols. This...

PT-2019-1322 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.13 and prior Description: The issue is related to inadequate access control in the Server: Connection component of Oracle MySQL Server. This can be exploited by a remote attacker to cause a denial of service...

CVE-2018-4256

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation...

CVE-2018-4258

In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking...

CVE-2018-4254

In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation...

CVE-2018-4217

In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing...

DEBIAN-CVE-2018-4181

In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions...

EulerOS 2.0 SP5 : gnutls (EulerOS-SA-2019-1005)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls CVE-2018-10844 Note that Tenable Network Security h...

Linux kernel denial of service vulnerability (CNVD-2019-00366)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A denial of service vulnerability exists in the cancangwrcv in the net/can/gw.c file in Linux kernel versions 4.19.13 and earlier, which can be exploited by an attacke...

EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2018-1444)

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls CVE-2018-10844 Note that Tenable Network Security h...

CentOS 7 : gnutls (CESA-2018:3050)

An update for gnutls is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...