Day: 21 febrero, 2019

https://wpvulndb.com/vulnerabilities/9216 More info: https://wpvulndb.com/vulnerabilities/9216

Multiple security issues were found in the rdesktop RDP client, whichcould result in denial of service, information disclosure and theexecution of arbitrary code. More info: https://www.debian.org/security/2019/dsa-4394

A prenotification security advisory (APSB19-13) has been posted regarding upcoming Adobe Acrobat and Reader updates scheduled for Thursday, February 21, 2019. We will continue to provide updates on the upcoming release via the Security Bulletins and Advisories page as well … Continue reading → More info: http://blogs.adobe.com/psirt/?p=1709

Linux kernel vulnerability CVE-2018-5953 Security Advisory Security Advisory Description The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to ... More info: https://support.f5.com/csp/article/K94735334

Several vulnerabilities have been discovered in the chromium web browser. More info: https://www.debian.org/security/2019/dsa-4395

Project: Drupal coreDate: 2019-February-20Security risk: Highly critical 20∕25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:UncommonVulnerability: Remote Code ExecutionCVE IDs: CVE-2019-6340Description: Some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.A site is only affected by this if one of the following conditions is met:The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows More info: https://www.drupal.org/sa-core-2019-003

glibc vulnerability CVE-2014-9402 Security Advisory Security Advisory Description The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the ... More info: https://support.f5.com/csp/article/K16365

Linux kernel vulnerability CVE-2018-10883 Security Advisory Security Advisory Description A flaw was found in the Linux kernels ext4 filesystem. A local user can cause an out-of-bounds write in ... More info: https://support.f5.com/csp/article/K94735334

Project: Drupal coreDate: 2019-February-20Security risk: Highly critical 20∕25 AC:None/A:None/CI:All/II:All/E:Theoretical/TD:UncommonVulnerability: Remote Code ExecutionCVE IDs: CVE-2019-6340Description: Some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.A site is only affected by this if one of the following conditions is met:The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows More info: https://www.drupal.org/sa-core-2019-003

Several vulnerabilities have been found in Ansible, a configurationmanagement, deployment, and task execution system: More info: https://www.debian.org/security/2019/dsa-4396