13603 matches found
Security Advisory - Use after Free Vulnerability in Huawei Product
There is a use after free vulnerability on Huawei smartphones. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would...
CVE-2020-10770
creationtimestamp| type| source ---|---|--- 2020-12-15 22:40:56+00:00| seen| https://t.me/cibsecurity/20877 2023-09-29 12:42:29+00:00| seen| https://t.me/cibsecurity/71269 2025-02-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-05 2025-03-09 00:00:00+00:00| see...
CVE-2020-27056
creationtimestamp| type| source ---|---|--- 2020-12-15 20:40:35+00:00| seen| https://t.me/cibsecurity/20841...
container-tools:rhel8 bug fix update
An update is available for python-podman-api, libslirp, toolbox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The container-tools module contains tools for...
Virtuozzo 7 : wget (VZLSA-2019-1228)
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2020-29303
creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:33+00:00| seen| https://t.me/cibsecurity/20771...
CVE-2020-35382
creationtimestamp| type| source ---|---|--- 2020-12-14 18:39:02+00:00| seen| https://t.me/cibsecurity/20740...
Security Bulletin: IBM Tivoli Common Reporting: TCR, a part of IBM Jazz for Service Management (JazzSM) is vulnerable to an information exposure vulnerability (CVE-2020-4643)
Summary WebSphere Application Server is vulnerable to an information exposure vulnerability. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Tivoli Common...
Ubuntu 20.10 : python-apt regression (USN-4668-2)
The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4668-2 advisory. USN-4668-1 introduced a regression in python-apt. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Note that Nessus h...
Virtuozzo 7 : patch (VZLSA-2019-2964)
An update for patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Virtuozzo 7 : java-1.8.0-openjdk / etc (VZLSA-2019-3128)
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2020-26964
creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:21+00:00| seen| https://t.me/cibsecurity/17476 2020-12-09 09:25:28+00:00| seen| https://t.me/cibsecurity/17496 2020-12-09 10:25:19+00:00| seen| https://t.me/cibsecurity/17516 2020-12-09 11:25:19+00:00| seen| https://t.me/cibsecurity/175...
SUSE SLES15 Security Update : conmon, fuse-overlayfs, libcontainers-common, podman (SUSE-SU-2020:2731-1)
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues : podman was updated to v2.0.6 bsc1175821 install missing systemd units for the new Rest API bsc1175957 and a few man-pages that where missing before Drop varlink API related bits in favor of the new A...
SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2020:3473-1)
This update for ceph fixes the following issues : CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. Added --container-init feature bsc1177319, bsc1163764 Made journald as the logdriver again bsc1177933 Fixes a condition check for copytree, copyfiles, and movefiles in cephadm...
Privilege Escalation
AppArmor is vulnerable to privilege escalation attacks. An unauthenticated attacker could have increased attack surfaces which would allow privilege escalation due to the use of common logic to handle 'restart' operations...
Remote code execution
PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...
UBUNTU-CVE-2020-29394
A buffer overflow in the dltfilterload function in dltcommon.c from dlt-daemon through 2.18.5 GENIVI Diagnostic Log and Trace allows arbitrary code execution because fscanf is misused no limit on the number of characters to be read in the format argument...
openSUSE Security Update : ceph (openSUSE-2020-2082)
This update for ceph fixes the following issues : - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...
OPENSUSE-SU-2020:2082-1 Security update for ceph
This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Added --container-init feature bsc1177319, bsc1163764 - Made journald as the logdriver again bsc1177933 - Fixes a condition check for copytree, copyfiles, and movefiles in...