Weekly Digest: a new vulnerability is published on the National Vulnerability Database (26 items)

New vulnerabilities from the NVD: CVE-2019-10212 A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. Published at: October 02, 2019 at 10:15PM View on website October 03, 2019 at 12:25AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16452 The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16451 The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16301 libpcap, as used in tcpdump before 4.9.3, has a buffer overflow and/or over-read. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16300 The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16230 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16229 The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16228 The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-16227 The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14882 The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14881 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14880 The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14879 The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14470 The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14469 The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14468 The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14467 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14466 The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14465 The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14464 The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14463 The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14462 The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-14461 The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-10105 tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-10103 tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). Published at: October 03, 2019 at 07:15PM View on website October 03, 2019 at 10:25PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-11768 In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage. Published at: October 04, 2019 at 05:15PM View on website October 04, 2019 at 08:25PM via National Vulnerability Database

Weekly Digest: New diabetes clinical trial (8 items)

New diabetes clinical trial: Biomarkers During Pregnancy Published on: September 30, 2019 at 07:00PM Conditions:   Diabetes Mellitus in Pregnancy;   Gestational Diabetes Intervention:   Other: Specimens Collected Sponsors:   Washington University School of Medicine;   National Institutes of Health (NIH) Recruiting https://clinicaltrials.gov/ct2/show/NCT04108455?term=diabetes&sfpd_d=14 September 30, 2019 at 03:07PM via ClinicalTrials.gov New diabetes clinical trial: A Research Study Comparing a New Medicine Oral Semaglutide to Placebo in People With Type 2 Diabetes Published on: September 30, 2019 at 07:00PM Condition:   Diabetes Mellitus, Type 2 Interventions:   Drug: Oral semaglutide;   Drug: Placebo Sponsor:   Novo Nordisk A/S Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04109547?term=diabetes&sfpd_d=14 September 30, 2019 at 03:07PM via ClinicalTrials.gov New diabetes clinical trial: Family Intervention for Chinese Americans With Type 2 Diabetes Published on: September 30, 2019 at 07:00PM Condition:   Type 2 Diabetes Interventions:   Behavioral: Wait-list control group;   Behavioral: SMS intervention Sponsor:   NYU Langone Health Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04108299?term=diabetes&sfpd_d=14 September 30, 2019 at 03:07PM via ClinicalTrials.gov New diabetes clinical trial: Effect of L-arginine on Microcirculation, Myogenesis and Angiogenesis Associated With Aging, Sarcopenia and Diabetes Published on: October 02, 2019 at 07:00PM Conditions:   Aging;   Sarcopenia;   Type 2 Diabetes;   Microcirculation Interventions:   Dietary Supplement: L-arginine;   Dietary Supplement: Maltodextrin Sponsors:   Rio de Janeiro State University;   Laboratory for Clinical and Experimental Research on Vascular Biology Completed https://clinicaltrials.gov/ct2/show/NCT04112875?term=diabetes&sfpd_d=14 October 02, 2019 at 03:07PM via ClinicalTrials.gov New diabetes clinical trial: Study of the Genome, Gut Metagenom and Lifestyle of Patients With Newly Diagnosed Type 2 Diabetes Published on: October 02, 2019 at 07:00PM Conditions:   Microbiome;   Metabolic Syndrome;   Diabetes Mellitus, Type 2 Interventions:   Diagnostic Test: 16S RNA sequencing;   Genetic: Genome test Sponsor:   Atlas Biomed Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04113239?term=diabetes&sfpd_d=14 October 02, 2019 at 03:07PM via ClinicalTrials.gov New diabetes clinical trial: Effect of Prebiotics on the Gut Microbiome Profile and Beta Cell Function Published on: October 03, 2019 at 07:00PM Condition:   Type 1 Diabetes Intervention:   Drug: Acetylated and Butyrylated High Amylose Maize Starch Sponsor:   Indiana University Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04114357?term=diabetes&sfpd_d=14 October 03, 2019 at 03:31PM via ClinicalTrials.gov New diabetes clinical trial: Evaluation of Extended Wear Infusion Set (EWIS) in Patients With Insulin-Requiring Diabetes Published on: October 03, 2019 at 07:00PM Condition:   Diabetes Intervention:   Device: Extended Wear Infusion Set Sponsor:   Medtronic Diabetes Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04113694?term=diabetes&sfpd_d=14 October 03, 2019 at 03:31PM via ClinicalTrials.gov New diabetes clinical trial: Longitudinal Assessment of Multiple Organs in Patients With Type 2 Diabetes Published on: October 03, 2019 at 07:00PM Condition:   Type 2 Diabetes Intervention:   Other: Multi parametric MRI scan Sponsors:   Perspectum Diagnostics Ltd;   University of Liverpool;   Aintree University Hospitals NHS Foundation Trust;   Oxford University Hospitals NHS Trust;   Royal Free Hospital NHS Foundation Trust Not yet recruiting https://clinicaltrials.gov/ct2/show/NCT04114682?term=diabetes&sfpd_d=14 October 03, 2019 at 03:31PM via ClinicalTrials.gov

програмата на Чешкия център за 7 - 13 октомври

Седмичен бюлетин 30/2019 7 - 13 октомври 2019 г. http://sofia.czechcentres.cz/

Музика Дизайн/ Мода

Музика Музикално турне на Treetop в България 7. 10. 2019 - 10. 10. 2019 Rakovski 100, 1000 Sofia Съвременна млада група от чешката джаз сцена ще има възможност да види българската публика благодарение на Чешкия център в София. Това е триото Treetop (акордеон, контрабас и тромбон) – нетрадиционна банда от млади музиканти, абсолвени и студенти от Катедра джаз интерпретации в Музикалната акдемия „Яначек" в Бърно (JAMU). Повече на: ČC Sofie Нагоре Дизайн/ Мода Биенале на стъклото 2019 10. 10. 2019 - 25. 10. 2019 Rakovski 100, 1000 Sofia Международно Биенале на Стъклото /МБС, 20.9. - 4.11.2019/ е най-мащабното и професионално ориентирано събитие в България, посветено изцяло на художественото стъкло. То се провежда в периода септември-октомври, на всеки две години. Гости на събитието са чуждестранни автори и лектори, които запознават публиката с възможностите и постиженията в тази сфера на изобразителното изкуство. Повече на: ČC Sofie Нагоре Редактор: Чешки център Контакт: София 1000, ул. "Г. С. Раковски" 100

Програмата на Чешкия цетър за 30 септември - 6 октомври 2019

Седмичен бюлетин № 29/2019 30 септември - 6 октомври 2019 http://sofia.czechcentres.cz/

Литература Обществени науки Танц Дизайн/ Мода

Литература Писателят Мартин Вопенка в София 2. 10. 2019 Rakovski 100, 1000 Sofia По покана на издателство „ЕМАС" писателят Мартин Вопенка ще представи на 2 октомври от 18 часа в чешкия център романа си „Спящият град", който неотдавна излезе на български език в превод на Анжелина Пенчева. Повече на: ČC Sofie Нагоре Обществени науки „Македония" от Владимир Сис на български език 3. 10. 2019 Rakovski 100, 1000 Sofia Македония. Географскор историческо, етноложко, статистическо и културоложко изследване" от Владимир Сис излиза на български малко повече от век след публикуването й на чешки език и в годината, когато отбелязваме 130 години от рождението на нейния автор. Книгата, издадена в поредицата Македонска библиотека на Македонския научен институт в превод на проф. Владимир Пенчев, ще бъде представена на 3 октомври от 18 часа в Чешкия център. Повече на: ČC Sofie Нагоре Танц ONE DANCE WEEK: „СОМА" на Мартин Талага 4. 10. 2019 Dům kultury Borise Christova v Plovdivu (ul. Gladston 15) „Сома" е визуално-танцувален пърформанс , вдъхновен от изобразителното изкуство и представата за идеала за красота в човешката история. Повече на: ČC Sofie Нагоре Дизайн/ Мода НГПИ „Св. Лука" с изложба в Чешкия център 20. 9. 2019 - 4. 10. 2019 Rakovski 100, 1000 Sofia Изложба на специалностите „Пространствен дизайн", „Дизайн на детски играчки и сувенири" и „Силикатен дизайн" от НГПИ „Св. Лука" в Чешкия център в София. Изложбата ще продължи до 4 октомври 2019 г. Повече на: ČC Sofie Нагоре Редактор: Чешки център Контакт: София 1000, ул. "Г. С. Раковски