Apple Releases Emergency Patch for iPhone Jailbreak Flaw

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2019-15055PUBLISHED: 2019-08-26

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator with...

CVE-2019-15497PUBLISHED: 2019-08-26

Black Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and other products, has default credentials that allow remote attackers to access devices remotely via SSH, HTTP, HTTPS, and FTP.

CVE-2018-18668PUBLISHED: 2019-08-26

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.

CVE-2019-8460PUBLISHED: 2019-08-26

Reuven Plevinsky and Tal Vainshtein of Check Point Software Technologies Ltd. discovered that OpenBSD kernel (all versions, including 6.5) can be forced to create long chains of TCP SACK holes that cause very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a den...

CVE-2019-9569PUBLISHED: 2019-08-26

Buffer Overflow in dacterea in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary code and possibly cause a denial of service via unspecified ..

Support the originator by clicking the read the rest link below.