trending on social media
CVE-2019-0859 – Yet Another Windows Zero-Day Vulnerability Description This week’s trending vulnerability may sound eerily familiar. CVE-2019-0859 is an elevation of privilege vulnerability in Win32k component of Microsoft …
trending on social media
CVE-2019-0211 – Carpe Diem – Apache Local Privilege Escalation Vulnerability Description This week’s trending vulnerability is CVE-2019-0211 , a local privilege escalation vulnerability in Apache HTTP Server. Apache …
trending on social media
Back in February, we talked about a malicious container ‘break out’ vulnerability in runc ( CVE-2019-5736 ), a universal command-line interface tool developed by Docker and used by Docker, Kubernetes and other containerization systems …
trending on social media
CVE-2019-1002101 – Kubernetes Directory Traversal Description Back in February, we talked about a malicious container ‘break out’ vulnerability in runc ( CVE-2019-5736 ), a universal command-line interface tool developed by …
trending on social media
CVE-2019-5418 – Ruby on Rails File Content Disclosure Vulnerability Description This week’s trending vulnerability, CVE-2019-5418, is a file content disclosure vulnerability in Action View module of Ruby on Rails. Ruby on Rails …
trending on social media
CVE-2019-0797 – Windows Zero-Day Vulnerability Description CVE-2019-0797 is one of the three zero-day vulnerabilities (one in Chrome, the other two in Windows) that we touched upon in our last week’s post . It was discovered by …
trending on social media
Google Chrome Zero-Day Vulnerability (CVE-2019-5786) & Two New Actively Exploited Windows Zero-Day Vulnerabilities Description On February 27 th , security engineers from the Threat Analysis Group at Google reported two zero-day …
trending on social media
Updates on Drupal (CVE-2019-6340) & A New Improper Input Validation Flaw Leading to RCE in Cisco Routers (CVE-2019-1663) The improper input validation flaw leading to remote code execution (RCE) in Drupal (CVE-2019-6340), which we …
trending on social media
CVE-2019-6340 – Improper Input Validation Leading to Remote Code Execution in Drupal This week’s most tweeted-about vulnerability is a, yet another, highly critical remote execution flaw in Drupal – CVE-2019-6340 . The …
trending on social media
CVE-2019-5736 – Malicious Container “Break Out” Vulnerability in Runc Last week, we extensively covered a security flaw in runc – a universal command-line interface tool used to support Docker and Linux container engines – …
