8009 matches found
[SECURITY] Fedora 34 Update: roundcubemail-1.4.12-1.fc34
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
The vulnerability of the vDaemon software from Cisco IOS XE SD-WAN allows a attacker to trigger buffer overflows.
The vulnerability of the vDaemon software in Cisco IOS XE SD-WAN lies in insufficient boundary checking during traffic processing. Exploiting this vulnerability can allow a remote attacker to trigger buffer overflows...
多款 MediaTek 芯片 缓冲区错误漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in several MediaTek chips that stems from a lack of boundary checking in apusys, which may result in memory corruption. This could result in a local elevation of privilege that...
MediaTek Apusys 缓冲区错误漏洞
MediaTek Apusys is a chipset from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Apusys that stems from a read out-of-bounds condition that may occur in apusys due to incorrect boundary checking. This could result in the disclosure of local information that...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
Input validation
Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM InfoSphere Information Server
Summary Multiple vulnerabilities in OpenSSL used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2021-3712 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By...
PT-2021-17013 · Unknown · Amd System Management Unit
Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bounds checking in the System Management Unit SMU, which may cause invalid memory accesses or updates. This could result in the SMU...
dnf security and bug fix update
dnf 4.7.0-4.0.1 -Fixed python stack trace with updateinfo list cves command Orabug: 32749660 - Replaced upstream bugzilla reporting reference. Orabug: 32829849 4.7.0-4 - Update translations RhBug:1961632 4.7.0-3 - Improve signature checking using rpmkeys RhBug:1967454 4.7.0-2 - Fix covscan issue:...
The vulnerability of the command-line interface (CLI) of Cisco IOS XE SD-WAN software allows a attacker to execute arbitrary commands.
The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the Adobe Genuine Service’s application checking mechanism lies in its insecure method of searching for DLL libraries. This allows attackers to exploit their privileges.
The vulnerability of the Adobe Genuine Service application checking mechanism is related to a insecure procedure for locating DLL libraries. Exploiting this vulnerability can allow attackers to enhance their privileges...
Mozilla Firefox Security Advisory (MFSA2013-78) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-25722
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...
JetBrains TeamCity Permission Check Insufficient Vulnerability
TeamCity, a Java-based build management and continuous integration server from JetBrains, is vulnerable to insufficient privilege checking in the "Create Patch" feature in versions prior to JetBrains TeamCity 2021.1.2. No details of the vulnerability are currently available...
Debian DSA-5003-1 : samba - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5003 advisory. - Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total doma...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
