Security fix for the ALT Linux 9 package clamav version 0.102.3-alt1

0.102.3-alt1 built May 27, 2020 Sergey Y. Afonin in task 245876 May 27, 2020 Sergey Y. Afonin - 0.102.3 + CVE-2020-3327 - 0.102.2 only + CVE-2020-3341 - from 0.101 to 0.102.2...

Security fix for the ALT Linux 10 package clamav version 0.102.3-alt1

May 27, 2020 Sergey Y. Afonin 0.102.3-alt1 - 0.102.3 + CVE-2020-3327 - 0.102.2 only + CVE-2020-3341 - from 0.101 to 0.102.2...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.15-alt0.M80P.1

2.5.15-alt0.M80P.1 built Jan. 10, 2020 Sergey Y. Afonin in task 243774 Jan. 2, 2020 Sergey Y. Afonin - 2.5.15 fixes: CVE-2019-19783...

y-pow.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1034856 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

ALPINE-CVE-2019-19242

SQLite 3.30.1 mishandles pExpr-y.pTab, as demonstrated by the TKCOLUMN case in sqlite3ExprCodeTarget in expr.c...

CVE-2019-5292

Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217C00E215R3P1, the versions before 9.1.0.205C00E97R1P9, the versions before 9.1.0.205C00E97R2P2 have an information leak vulnerability. Due to improper function error records of some module, an attacker with the acce...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2957-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

S-CMS php version enterprise website builder system v3.0 SQL injection vulnerability in background a***y parameter

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background ay parameters exist SQL injection vulnerability, attacke...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.13-alt0.M80P.1

2.5.13-alt0.M80P.1 built Sept. 5, 2019 Sergey Y. Afonin in task 236049 Aug. 14, 2019 Sergey Y. Afonin - 2.5.13 CVE-2019-11356 - built with USESETPROCTITLE some solutions of the issue 2850 was used, look to cyrus-imapd-2.5.13-setproctitle.c.patch - fixed packaging the imtest utility...

Siemens SIPLUS S7 BUS MODULE FOR Y-COUPLER Detection

Binary data 750303.prm...

Siemens SIPLUS S7-400 Y-COUPLER Detection

Binary data 750302.prm...

Security update for ucode-intel (moderate)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:1084-1 Rating: moderate References: 1129231 Affected Products: openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following...

SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:0736-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

CVE-2019-10024

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:0712-1)

This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...

CVE-2019-10024

CVE-2019-10024 affects Xpdf 4.01.01, with a fault described as a floating-point exception in Splash::scaleImageYuXu (Splash.cc) related to y Bresenham parameters. The connected sources confirm the vulnerable component and function but do not provide explicit exploit details, affected products bey...

CVE-2019-9770

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwgdecodeeeddata at decode.c for the y dimension...

y-thai.net XSS vulnerability

Open Bug Bounty ID: OBB-706340 Description| Value ---|--- Affected Website:| y-thai.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

y-league.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-700038 Description| Value ---|--- Affected Website:| y-league.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Cybersecurity and Class M Planets

I was considering another debate about appropriate cybersecurity measures and I had the following thought: not all networks are the same. Profound, right? This is so obvious, yet so obviously forgotten. Too often when confronting a proposed defensive measure, an audience approaches the concept fr...