27 matches found
openSUSE: Security Advisory for ovmf (openSUSE-SU-2021:0495-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2021-1736)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : ovmf (SUSE-SU-2021:0987-1)
This update for ovmf fixes the following issues : CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579 Note that Tenable Network Security has extracted the preceding description block direct...
SUSE-SU-2021:0972-1 Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579...
UBUNTU-CVE-2021-28210
An unlimited recursion in DxeCore in EDK II...
CVE-2020-28210
creationtimestamp| type| source ---|---|--- 2020-11-20 00:41:55+00:00| seen| https://t.me/cibsecurity/16635...
CVE-2020-28210
CVE-2020-28210 is a Cross-Site Scripting (CWE-79) vulnerability in EcoStruxure Building Operation WebStation (V2.0–V3.1). The root cause is improper input neutralization during webpage generation, enabling an authenticated remote user to inject HTML/JavaScript into other WebReport users’ browsers...