CVE-2020-19715

creationtimestamp| type| source ---|---|--- 2021-07-14 02:19:41+00:00| seen| https://t.me/cibsecurity/26132...

OpenJDK 7 <= 7u251 / 8 <= 8u242 / 11.0.0 <= 11.0.6 / 13.0.0 <= 13.0.2 / 14.0.0 <= 14.0.0 Multiple Vulnerabilities (2020-04-14)

The version of OpenJDK installed on the remote host is prior to 7 = 7u251 / 8 = 8u242 / 11.0.0 = 11.0.6 / 13.0.0 = 13.0.2 / 14.0.0 = 14.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020-04-14 advisory. Please Note: Java CVEs do not always include OpenJDK...

编号撤回

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in AcquireSemaphoreMemory in semaphore.c and AcquireMagickMemory in memory.c in ImageMagick version 7.0.11-14. No details of the...

CVE-2021-33604 Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser...

Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser. See CWE-172: Encoding Erro...

CVE-2021-24350

creationtimestamp| type| source ---|---|--- 2021-06-14 18:37:40+00:00| seen| https://t.me/cibsecurity/25435...

CVE-2021-32550

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

Open redirect

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

CVE-2021-32550

CVE-2021-32550 affects Ubuntu Apport: read_file() in apport/hookutils.py can follow symbolic links or open FIFOs, enabling a local attacker to access private data via openjdk-14 package apport hooks. Public details identify the vulnerability as local in scope with partial confidentiality impact a...

CVE-2021-32550 apport read_file() function could follow maliciously constructed symbolic links

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2020:14398-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14398-1 advisory. - Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231,...

SUSE: Security Advisory (SUSE-SU-2015:1184-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0246-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitrary file read in openjdk-14...

Slackware 14.0 / 14.1 / 14.2 / current : dhcp (SSA:2021-149-01)

New dhcp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-149-01. The text itself is copyrig...

GLSA-202105-14 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-14 Squid: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted request,...

CVE-2021-32550

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...

Apple Safari 缓冲区错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari suffers from a buffer error vulnerability. The vulnerability originates when a web-based system or product performs an operation in memory without properly...

bash security and bug fix update

4.4.19-14 - Fix hang when limit for nproc is very high Resolves: 1890888 4.4.19-13 - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: 1793943...

Backdoor.Win32.Antilam.14.d Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a53351e8fa0cb4f7db3d0250387a0e4f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.14.d Vulnerability: Unauthenticated Remote Command Execution Description: The...