Fedora 32 : community-mysql (2020-9c27be9396)

Update built with the new CMake settings Number of files which should have been owned by the testsuite subpackage are now owned by it Started building MeCab plugin Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Microsoft Internet Explorer 11 Use-After-Free

Exploit Title: Internet Explorer 11 - Use-After-Free Google Dork: if applicable Date: 2020-09-06 Exploit Author: Tgroup Vendor Homepage: Microsoft.com Version: IE 11 REQUIRED Tested on: Windows 7 x64 CVE : CVE-2020-0674 //...

CVE-2020-25221

getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page mishandling of the struct page that backs the vsyscall page. The result is a refcount underflow. This can be triggered by any 64-bit...

Security Update for Microsoft Excel 2016 (KB4484507) 64-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office 2016 (KB4484513) 64-Bit Edition

A security vulnerability exists in Microsoft Office 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Word 2016 (KB4484510) 64-Bit Edition

A security vulnerability exists in Microsoft Word 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

EulerOS Virtualization for ARM 64 3.0.2.0 : perl (EulerOS-SA-2020-1967)

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Perl before 5.30.3 has an integer overflow related to mishandling of a 'PLregkindOPn == NOTHING' situation. A crafted...

EulerOS Virtualization for ARM 64 3.0.2.0 : sqlite (EulerOS-SA-2020-1987)

According to the versions of the sqlite package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in SQLite when rewriting select statements for window functions. This flaw...

EulerOS Virtualization for ARM 64 3.0.2.0 : pcre (EulerOS-SA-2020-1950)

According to the version of the pcre packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring.CVE-2020-14155 Note that...

EulerOS Virtualization for ARM 64 3.0.2.0 : python-pillow (EulerOS-SA-2020-1966)

According to the versions of the python-pillow package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where...

EulerOS Virtualization for ARM 64 3.0.2.0 : vim (EulerOS-SA-2020-1957)

According to the version of the vim packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, i...

EulerOS Virtualization for ARM 64 3.0.2.0 : cups (EulerOS-SA-2020-1974)

According to the version of the cups package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - There is a buffer error vulnerability in Apple cups. The vulnerability is due to the improper verification of data boundarie...

EulerOS Virtualization for ARM 64 3.0.2.0 : dbus (EulerOS-SA-2020-1982)

According to the version of the dbus packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An uncontrolled resource consumption vulnerability was discovered in D-Bus. The DBusServer leaks file descriptors when a...

EulerOS Virtualization for ARM 64 3.0.2.0 : cpio (EulerOS-SA-2020-1962)

According to the version of the cpio package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attac...

EulerOS Virtualization for ARM 64 3.0.2.0 : glibc (EulerOS-SA-2020-1956)

According to the versions of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds write vulnerability was found in glibc when handling signal trampolines on PowerPC. The backtrace...

EulerOS Virtualization for ARM 64 3.0.2.0 : grub2 (EulerOS-SA-2020-1965)

According to the version of the grub2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB...

EulerOS Virtualization for ARM 64 3.0.2.0 : python-ecdsa (EulerOS-SA-2020-1977)

According to the version of the python-ecdsa package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without th...

EulerOS Virtualization for ARM 64 3.0.2.0 : nmap (EulerOS-SA-2020-1979)

According to the version of the nmap package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service stack consumption and...

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2020-1967)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2020-1973)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...