21493 matches found
Intel® RealSense™ ID Advisory
Summary: Potential security vulnerabilities in the Intel® RealSense™ ID may allow escalation of privilege. Intel is releasing prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24515 Description: Protection mechanism failure in some IntelR...
Language Sparrow is vulnerable to XSS
Language Sparrow is a specialized cloud-based knowledge base. Language Sparrow has an XSS vulnerability that can be exploited by an attacker to obtain user cookie information...
Intel® Wireless Bluetooth® and Killer™ Bluetooth® Advisory
Summary: Potential security vulnerabilities in Intel® Wireless Bluetooth® products and Killer™ Bluetooth® products may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-26555 Non-Intel issued Intel...
Intel® Processors Software Developer Guidance Advisory
Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel is releasing updated software developer prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0086 Description: Observable response...
Security Bulletin: IBM Security Guardium is affected by a kernel vulnerability
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-35513 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a flaw with incorrectly umask during file or directory modification in the NFS network file system function. By sending ...
CVE-2020-17541
A stack-based buffer overflow flaw was found in libjpeg-turbo library in the tranform component. An attacker may use this flaw to input a malicious image file to an application utilizing this library, leading to arbitrary code execution. The highest threat from this vulnerability is to data...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
openSUSE Security Update : gstreamer / gstreamer-plugins-bad / gstreamer-plugins-base / etc (openSUSE-2021-822)
This update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly fixes the following issues : gstreamer was updated to version 1.16.3 bsc1181255 : - delay creation of threadpools - bin: Fix deep-element-removed log message - buffer: fix meta...
openSUSE: Security Advisory for gstreamer, (openSUSE-SU-2021:0822-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2021-10305 · Facebook · React Native
Name of the Vulnerable Software and Affected Versions: react-native versions 0.59.0 through 0.64.1 Description: A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash...
React Native代码问题漏洞
React Native is an open source JavaScript framework. It is used to build user interfaces and native applications. A code issue vulnerability exists in react-native version 0.59.0, which stems from a regular expression in the validateBaseUrl function that could cause an application to use too many...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
Null pointer dereference
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
CVE-2021-3514
In 389-ds-base, the vulnerability CVE-2021-3514 is triggered when using a sync_repl client: an authenticated attacker can send a specially crafted query that results in a NULL pointer dereference, causing a crash (denial of service). Several connected advisories reference this flaw and note a rel...
Retention type changes after re-adding an object storage repository
Challenge When a repository extended to object storage that was initially created using PowerShell or REST API is removed from Veeam Backup for Microsoft 365 and then added back, the retention type changes to item-level. This change in retention type after such a repository has been re-added may...
Oracle Linux 8 : idm:DL1 (ELSA-2021-1983)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1983 advisory. slapi-nis 0.56.6-2 - CVE 2021-3480: idm:DL1/slapi-nis: NULL dereference DoS with specially crafted Binding DN - Resolves: rhbz1944713 Tenable has extracted the...