SUSE SLES12: kernel-livepatch-4_12_14-197_102-default / etc (SUSE-SU-2021:4039-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4039-1 advisory. This update for the Linux Kernel 4.12.14-122103 fixes one issue. The following security issue was fixed: - CVE-2021-0935: In ip6xmit of...

CVE-2021-29113

creationtimestamp| type| source ---|---|--- 2021-12-07 14:26:35+00:00| seen| https://t.me/cibsecurity/33434...

Hitachi Energy XMC20 and FOX61x

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: XMC20 and FOX61x Vulnerabilities: Weak Password Requirements, Missing Handler 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...

CVE-2021-36919

creationtimestamp| type| source ---|---|--- 2021-11-26 20:30:06+00:00| seen| https://t.me/cibsecurity/33006...

CVE-2021-26615

creationtimestamp| type| source ---|---|--- 2021-11-26 20:29:58+00:00| seen| https://t.me/cibsecurity/33003...

CVE-2020-7881

creationtimestamp| type| source ---|---|--- 2021-11-26 20:29:56+00:00| seen| https://t.me/cibsecurity/33002...

CVE-2021-35533

creationtimestamp| type| source ---|---|--- 2021-11-26 20:29:53+00:00| seen| https://t.me/cibsecurity/33000...

CVE-2021-41279

creationtimestamp| type| source ---|---|--- 2021-11-26 20:29:51+00:00| seen| https://t.me/cibsecurity/32999...

CVE-2021-25269

creationtimestamp| type| source ---|---|--- 2021-11-26 18:29:43+00:00| seen| https://t.me/cibsecurity/32995...

CVE-2021-38685

creationtimestamp| type| source ---|---|--- 2021-11-26 16:29:50+00:00| seen| https://t.me/cibsecurity/32991...

CVE-2021-1439

creationtimestamp| type| source ---|---|--- 2021-11-26 07:59:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/889 2021-11-26 12:17:01+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1236...

CVE-2021-40752

creationtimestamp| type| source ---|---|--- 2021-11-18 20:16:01+00:00| seen| https://t.me/cibsecurity/32638 2023-11-26 02:39:48+00:00| seen| https://t.me/arpsyndicate/582...

Mozilla Firefox Security Advisory (MFSA2011-26) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Mozilla Firefox Security Advisory (MFSA2018-26) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Security Bulletin: IBM Sterling Order Management is vulnerable to cross-site scripting

Summary IBM Sterling Order Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEI...

CVE-2021-1115

creationtimestamp| type| source ---|---|--- 2021-10-28 00:16:26+00:00| seen| https://t.me/cibsecurity/31331...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

CVE-2021-35499

creationtimestamp| type| source ---|---|--- 2021-10-26 20:15:02+00:00| seen| https://t.me/cibsecurity/31241...

GHSA-JCJX-PVPC-QGWQ

creationtimestamp| type| source ---|---|--- 2021-10-26 19:15:29+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1375 2021-10-27 01:02:42+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4594...

go.minneapolismn.gov Cross Site Scripting vulnerability OBB-2210734

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...