Couchbase Sync Gateway信息泄露漏洞

Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web from Couchbase, Inc. A security vulnerability exists in Couchbase Sync Gateway 2.7.0 through 2.8.2, which stems from the fact that the bucket credentials used to read and write data in Couchbase...

ASB-A-179338675

In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...

GSD-2021-1002314 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002314 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002282 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002282 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002260 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

GSD-2021-1002248 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

UVI-2021-1002248 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

GSD-2021-1002237 i40e: Fix NULL ptr dereference on VSI filter sync

i40e: Fix NULL ptr dereference on VSI filter sync This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.256 by commit...

OESA-2021-1434 gfbgraph security update

GLib/GObject wrapper for the Facebook Graph API. Security Fixes: In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to...

linuxptp: wrong length of one-step follow-up in transparent clock

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to...

Brave Android 1.31.91 Security Fixes

Clarified sync setup instructions...

The design of wibBTC is not fully compatible with the current Curve StableSwap pool

Handle WatchPug Vulnerability details Per the documentation, wibBTC is designed for a Curve StableSwap pool. However, the design of wibBTC makes the balances change dynamically and automatically. This is unusual for an ERC20 token, and it's not fully compatible with the current Curve StableSwap...

Azure File Sync Agent v14.0 Release – October 2021 (KB5001872)

Update for Azure File Sync agent version 14.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v14.0 Release – October 2021 (KB5001872)

Update for Azure File Sync agent version 14.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v14.0 Release – October 2021 (KB5001872)

Update for Azure File Sync agent version 14.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v14.0 Release – October 2021 (KB5001872)

Update for Azure File Sync agent version 14.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

The vulnerability of the HBS 3 (Hybrid Backup Sync) backup and disaster recovery application for QTS operating systems, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the HBS 3 Hybrid Backup Sync backup and disaster recovery application for QTS operating systems is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

WordPress 插件 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. A cross-site request forgery vulnerability exists in the WordPress Compact WP Audio Player plugin in versions prior to 1.9.7, which stems from the fact that the web application does not adequatel...