Servers using libssh to implement the Secure Shell (SSH) remote login protocol may be vulnerable to attacks due to the existence of an authentication bypass flaw discovered recently by a researcher. read more http://feedproxy.google.com/~r/Securityweek/~3/vIxJy8b6Wi4/libssh-vulnerability-exposes-serve..
Tag : Vulnerabilities
Google on Tuesday released Chrome 70 in the stable channel, with patches for nearly two dozen vulnerabilities, as well as with updated sign-in options. read more http://feedproxy.google.com/~r/Securityweek/~3/pzCS12obzdY/chrome-70-updates-sign-options-patche..
Researchers have found several vulnerabilities that can be exploited to take full control of some D-Link routers, and patches do not appear to be available. Serious flaws have also been discovered in routers from Linksys. read more http://feedproxy.google.com/~r/Securityweek/~3/6squQ7YiyIA/critical-vulnerabilities-allow-takeover-d-li..
Oracle’s October 2018 Critical Patch Update (CPU) was rolled out on Tuesday with 301 security fixes, bringing the total of patches released this year to 1,119. read more http://feedproxy.google.com/~r/Securityweek/~3/dH75Uu1ulFI/oracles-october-2018-update-includes-301-secu..
A vulnerability in the software update process of certain Medtronic Programmer models has determined the vendor to block the functionality on affected devices, the U.S. Food and Drug Administration (FDA) informs. read more http://feedproxy.google.com/~r/Securityweek/~3/y3grKNc-0BM/fda-warns-flaws-medtronic-p..
An out-of-bounds (OOB) write bug in the Microsoft JET Database Engine that could be exploited for remote code execution has been incompletely addressed with the latest Patch Tuesday security updates, 0patch says. read more http://feedproxy.google.com/~r/Securityweek/~3/lphbnEijf9o/microsoft-incompletely-patches-jet-database-vul..
Hundreds of millions of users may have been exposed to cross-site scripting (XSS) attacks due to a vulnerability present in Branch.io, a service used by Tinder, Shopify, Yelp and many others. read more http://feedproxy.google.com/~r/Securityweek/~3/lYgJSi6XYV4/branchio-flaws-exposed-tinder-shopify-yelp-users-x..
A threat actor was observed targeting Drupal vulnerabilities patched earlier this year to install a backdoor on compromised servers, IBM reports. read more http://feedproxy.google.com/~r/Securityweek/~3/UldYVjKHHG4/hackers-exploit-drupalgeddon2-instal..
An audit commissioned by Mozilla for the Firefox update system revealed no critical vulnerabilities and the flaws rated “high severity” were not easy to exploit. read more http://feedproxy.google.com/~r/Securityweek/~3/fv_UzekixDQ/audit-finds-no-critical-flaws-firefox-upd..
Juniper Networks this week informed customers that its Junos operating system is affected by many serious vulnerabilities, including a flaw that may have been triggered during malicious network probing. read more http://feedproxy.google.com/~r/Securityweek/~3/A6lOFdVFqVA/juniper-patches-serious-flaw..
