SUSE SLES12 Security Update : libtasn1 (SUSE-SU-2022:3797-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3797-1 advisory. Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. - CVE-2017-6891: Added safety check to fix a...

SUSE: Security Advisory (SUSE-SU-2022:3801-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2022-2638)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! SQL Injection (CVE-2018-8045)

An SQL injection vulnerability exists in Joomla!. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Supervene RazDC WebUI Cross-Site Scripting (CVE-2018-15550)

A cross-site scripting vulnerability exists in Supervene. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

EulerOS 2.0 SP3 : openjpeg (EulerOS-SA-2022-2627)

According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJPEG before 2.3.1 has a heap buffer overflow in colorapplyiccprofile in bin/common/color.c. CVE-2018-21010 Note that Tenable Network Securi...

EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2022-2638)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update

An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

Hackers Actively Exploiting Cisco AnyConnect and GIGABYTE Drivers Vulnerabilities

Cisco has warned of active exploitation attempts targeting a pair of two-year-old security flaws in the Cisco AnyConnect Secure Mobility Client for Windows. Tracked as CVE-2020-3153 CVSS score: 6.5 and CVE-2020-3433 CVSS score: 7.8, the vulnerabilities could enable local authenticated attackers t...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-paramiko (SUSE-SU-2022:3730-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3730-1 advisory. Updated to version 2.4.3: - CVE-2018-1000805: Fixed authentication bypass bsc1111151. Bugfixes: - Fixed...

Oracle GoldenGate (Oct 2022 CPU)

The version of GoldenGate installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in Oracle GoldenGate component: Oracle GoldenGate Microservices Dell BSAFE Micro Edition Suite. The supported version that is affected is...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a sandboxed process that may be able to bypass sandbox restrictions. The following products and versions are affected: mac Studio version 2022, M...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS. An attacker exploiting this vulnerability could access sensitive user information. The following products and versions are affected: mac Studio version 2022, Ma...

Apple macOS 资源管理错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from reuse after release, where applications may be able to execute arbitrary code with kernel privileges. The following products and versions are...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from an application that could lead to a denial of service. The following products are affected: mac Studio 2022, Mac Pro 2019 and later models,...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a sandboxed process that may be able to bypass sandbox restrictions. The following products and versions are affected: mac Studio version 2022, M...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that users with physical access to the device may be able to use Siri to obtain some call log information. The following products and...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that sandboxed applications may be able to determine which application is currently using the camera. The following products and...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS has a security vulnerability that stems from an application that may disclose sensitive kernel state. The following products are affected: mac Studio 2022, Mac Pro 2019 and later models, MacBook A...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from type obfuscation, where applications may be able to execute arbitrary code with kernel privileges. The following products and versions are...