2020-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4586830)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Intel Unite® Client Advisory

Summary: A potential security vulnerability in the Intel® Unite Client for Windows may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-0575 Description: Improper buffer restrictions in the IntelR Uni...

Intel® Media SDK for Windows* Advisory

Summary: A potential security vulnerability in the Intel® Media SDK for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11121 Description: Improper file permissions in the installer for...

Intel® QAT for Linux Advisory

Summary: A potential security vulnerability in the Intel® QuickAssist Technology QAT for Linux may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12333 Description: Insufficiently protected...

Intel® ADAS IE Advisory

Summary: A potential security vulnerability in the Intel® Advanced Driver Assistance Systems Innovation Engine ADAS IE firmware may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12323 Description...

Intel CSI2 Host Controller Advisory

Summary: A potential security vulnerability in the Intel Camera Serial Interface CSI 2 Host Controller driver may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0573 Description: Out of bounds read...

Intel® Thunderbolt™ DCH Drivers for Windows* Advisory

Summary: Potential security vulnerabilities in some Intel® Thunderbolt™ DCH drivers for Windows may allow escalation of privilege or information disclosure. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12325 Description: Improper...

Security Bulletin: Vulnerabilities in Tivoli Netcool/OMNIbus

Summary There are vulnerabilities in the libnhttpd interface which is part of Tivoli Netcool/OMNIbus. This were discovered during penetration testing of the product. Vulnerability Details Third Party Entry: PSIRT-ADV0026226 DESCRIPTION: Created from Advisory: ADV0026226 CVSS Base score: 8.8 CVSS...

base-ag.de Cross Site Scripting vulnerability OBB-1493718

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the APIs of the Oracle Installed Base information storage center component in the Oracle E-Business Suite, which allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the APIs of the Oracle Installed Base information storage center in the Oracle E-Business Suite relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the...

Unspecified Vulnerability in Apple AirPort Base Station

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in the Apple AirPort Base Station using firmware versions prior to 7.9.1, which restores the device to factory settings and does not delete all user data. No details of the vulnerability are...

Apple AirPort Base Station Code Issue Vulnerability (CNVD-2020-60818)

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...

Apple AirPort Base Station Denial of Service Vulnerability (CNVD-2020-65931)

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...

Apple AirPort Base Station Code Issue Vulnerability

The Apple AirPort Base Station is a wireless router from Apple USA. A code issue vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. The vulnerability stems from an improper design or implementation during code development for a network system or product. No...

An issue was discovered in the Linux kernel through 5.9.1 as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device aka CID-073d0552ead5.

...

dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...

Apple AirPort Base Station Denial of Service Vulnerability

The Apple AirPort Base Station is a wireless router from Apple USA. A security vulnerability exists in Apple AirPort Base Station using firmware versions prior to 7.9.1. An attacker could exploit this vulnerability to cause a denial of service...

Veeam Support for Azure Stack Edge

Overview Veeam supports using Veeam Agents for Windows and Linux to backup virtual machines running on Azure Stack Edge Compute. Microsoft Azure Stack Edge brings compute and storage to the edge where data is created. Veeam Support for Azure Stack Edge Compute is separate to the support for Azure...

Oracle Rushes Emergency Fix for Critical WebLogic Server Flaw

Oracle has released a rare out-of-band patch for a remote code-execution flaw in several versions of its WebLogic server. The vulnerability CVE-2020-14750 has a CVSS base score of 9.8 out of 10, and is remotely exploitable without authentication meaning it may be exploited over a network without...

anaconda-user-help bug fix and enhancement update

An update is available for anaconda-user-help. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...