CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661...

CVE-2020-0497

In canUseBiometric of BiometricServiceBase, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158481661...

container-tools:1.0 bug fix and enhancement update

An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, skopeo, slirp4netns, oci-systemd-hook, containernetworking-plugins, buildah, criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Cast Iron & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in January 2020 have been addressed the applicable CVEs Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An...

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2020-2539)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Js-data Security Vulnerabilities

Js-data is Js-data Js-data team of a Javascript-based ORM framework for interacting with multiple data sources . The software supports Firebase, MySql, RethinkDB, MongoDB, localStorage, Redis and other data sources. A security vulnerability exists in all versions of js-data, which stems from the...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2020-2539)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An...

Virtuozzo 7 : httpd / httpd-devel / httpd-manual / httpd-tools / etc (VZLSA-2019-2343)

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-10693)

Summary IBM Cloud Transformation Advisor has addressed the following vulnerability: CVE-2020-10693 Vulnerability Details CVEID: CVE-2020-10693 DESCRIPTION: Hibernate Hibernate Validator could allow a remote attacker to bypass security restrictions, caused by a flaw in the message interpolation...

The vulnerability of the base component of the Google Chrome web browser, which allows a hacker to execute arbitrary code.

The vulnerability of the base component of the Google Chrome web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

2020-12 Cumulative Update for Azure Stack HCI, version 20H2 for x64-based Systems (KB4592441)

Install this update to resolve issues in Azure Stack HCI, version 20H2. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

RUSTSEC-2020-0097 Soundness issue with base::Error

base::Error type contains public field named ptr. With this definition, it is possible to create a base::Error with an invalid pointer and trigger memory safety errors such as use-after-free or double-free with safe Rust. The users of xcb crate are advised not to manipulate the field...

Soundness issue with base::Error

base::Error type contains public field named ptr. With this definition, it is possible to create a base::Error with an invalid pointer and trigger memory safety errors such as use-after-free or double-free with safe Rust. The users of xcb crate are advised not to manipulate the field...

[SECURITY] Fedora 33 Update: matrix-synapse-1.23.0-1.fc33

Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise V11 ( CVE-2020-8244)

Summary IBM App Connect Enterprise V11 ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below Vulnerability Details CVEID: CVE-2020-8244 DESCRIPTION: Node.js bl module could allow a remote attacker to obtain sensitive information,...

Download and Manage VCSP Licenses On The Pulse Portal

Purpose Accessing and managing the hosting rental Veeam Cloud & Service Provider licenses on the VCSP Pulse self-service portal. VCSP Pulse is an automated platform where the Service Providers can generate, edit, manage, and download rental licenses directly. The platform represents a collaborati...

2020-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4593226)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2020-12 Cumulative Update for Windows Server, version 20H2 for x64-based Systems (KB4592438)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2020-12 Cumulative Update for Windows Server, version 20H2 for ARM64-based Systems (KB4592438)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2020-12 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB4592438)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...