PT-2019-3349 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/line6/driver.c driver, which can be caused by a malicious USB device. This can lead to a denial of service. Recommendations:...

May 23, 2019—KB4499182 (Preview of Monthly Rollup)

None None...

May 23, 2019—KB4499184 (Preview of Monthly Rollup)

None None...

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...

kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow

The usbdestroyconfiguration function, in 'drivers/usb/core/config.c' in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, du...

CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting...

PT-2019-3109 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.14 Description: The issue is related to a NULL pointer dereference in the drivers/usb/misc/yurex.c driver, caused by a malicious USB device. This can lead to a denial of service. Recommendations: For Linux...

Rockwell Automation 1790D-T32BV0 32 Universal Input General Purpose Discrete I/O

Binary data 752659.prm...

Emerson 396362-02-8 Universal Digital Input module Detection

Binary data 756554.prm...

Rockwell Automation 1790 16 Universal Input 1790-16BV0X Adapter I/O Accessed Via Proxy

Binary data 754532.prm...

Entek XM-361 Universal Temp. Module Specialty I/O

Binary data 754839.prm...

Rockwell Automation 1790 8 Universal In/8 Out 1790-8BV8BX/8BV8VX Adapter I/O Accessed Via Proxy

Binary data 754535.prm...

Rockwell Automation 1719-IRT4 Ex I/O 4 Channel Universal Temperature Input General Purpose Analog I/O

Binary data 754857.prm...

Universal Password Login Vulnerability in Enterprise Knowledge Service Platform

Enterprise knowledge service platform is a platform system based on literature but higher than literature, from resource type guarantee to enterprise personalized knowledge service. There is a universal password login vulnerability in the enterprise knowledge service platform, which can be...

NULL Pointer Dereference

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. A flaw was found in the way IP packets with an Internet Header Length ihl of zero were processed in the skbflowdissect function in the Linux kernel. A remote attacker could use this flaw to trigger an infinit...

Information Disclosure

Vino is a Virtual Network Computing VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC. It was found that Vino transmitted all clipboard activity on the system running Vino to all clients connected to port 5900, even those who had not authenticated. A...

UBUNTU-CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting...

In-Depth Analysis of JS Sniffers Uncovers New Families of Credit Card-Skimming Code

In a world that's growing increasingly digital, Magecart attacks have emerged as a key cybersecurity threat to e-commerce sites. Magecart, which is in the news a lot lately, is an umbrella term given to 12 different cyber criminal groups that are specialized in secretly implanting a special piece...

HP LaserJet P3015 Printers 6.7.0.x Authentication Bypass

Exploit Title : HP LaserJet P3015 Printers 6.7.0.x Bypass Missing Authentication Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/03/2019 Vendor Homepage : hp.com Software Information Link :...

CVE-2019-5519

VMware ESXi 6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001, Workstation 15.x before 15.0.4, 14.x before 14.1.7, Fusion 11.x before 11.0.3, 10.x before 10.1.6 contain a Time-of-check Time-of-use TOCTOU vulnerability in the virtual USB 1.1 UHCI Universal Ho...