Important: Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update

An update for rh-dotnet50-dotnet is now available for .NET on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

GHSA-68JC-V27H-VHMW Drupal core Unrestricted Upload of File with Dangerous Type

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue affects: Drupal Drupal Core 9.0 versions prior to...

October 12, 2021—KB5006743 (Monthly Rollup)

None None...

Microsoft Windows Kernel 权限许可和访问控制问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Kernel with privilege permission and access control issues. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

KB5006749: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 12, 2021

KB5006749: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: October 12, 2021 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable...

RHEL 7 : kernel (RHSA-2021:3766)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3766 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Improper handling of...

RHEL 7 : httpd24-httpd (RHSA-2021:3754)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3754 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modproxy: SSRF via a...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9475)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9475 advisory. - btrfs: fix NULL pointer dereference when deleting device by invalid id Qu Wenruo Orabug: 33281078 CVE-2021-3739 - net: qrtr: fix another OOB Read...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9474)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9474 advisory. - btrfs: fix NULL pointer dereference when deleting device by invalid id Qu Wenruo Orabug: 33281078 CVE-2021-3739 - net: qrtr: fix another OOB Read...

allen.dev.sheriffsaleauction.ohio.gov Cross Site Scripting vulnerability OBB-2158951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

lottomonthly.com Cross Site Scripting vulnerability OBB-2158894

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

deux.commonaccord.org Cross Site Scripting vulnerability OBB-2158879

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security fix for the ALT Linux 9 package apache2 version 1:2.4.50-alt1

Oct. 7, 2021 Anton Farygin 1:2.4.50-alt1 - 2.4.50 Fixes: CVE-2021-41773, CVE-2021-41524...

PT-2021-7272 · Siemens · Simatic Step 7

Name of the Vulnerable Software and Affected Versions: SIMATIC STEP 7 TIA Portal V15 All versions SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5 SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2 Description: A vulnerability has been identified due to improper access control in the...

CVE-2021-20318

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage...

RHEL 7 : kernel (RHSA-2021:3725)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3725 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Improper handling of...

RHEL 7 : samba (RHSA-2021:3723)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3723 advisory. Red Hat Gluster Storage is a software only scale-out storage solution that provides flexible and affordable unstructured data storage. It...

Mitsubishi Electric GOT and Tension Controller (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT and Tension Controller Vulnerabilities: Improper Handling of Exceptional Conditions, Improper Input Validation --------- Begin Update A Part 1 of 2 ---------...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9470)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9470 advisory. - fuse: fix live lock in fuseiget Amir Goldstein Orabug: 33406810 CVE-2021-28950 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 7 / 8 : OpenShift Container Platform 4.8.13 (RHSA-2021:3631)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3631 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...