9911 matches found
EulerOS Virtualization 2.9.1 : edk2 (EulerOS-SA-2021-1633)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...
Acronis: Information Disclosure via ZIP file on AWS Bucket [http://acronis.1.s3.amazonaws.com]
Summary Hello, @acronis Team I hope you all doing well. during My recon, I found OPEN S3 BUCKET http://acronis.1.s3.amazonaws.com and this BUCKET has an ZIP file . and this file contains sensitive information about the internal system of Acronis. This Zip file Is from 2018. And it looks like it w...
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Visual Studio Code security vulnerabilities
Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected: Microsoft Quantum Development Kit for Visual Studio Code...
PT-2021-2296 · Microsoft · Visual Studio Code Remote Development Extension
Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Development Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Development Extension for Visual Studio Code. Exploitation of this issue m...
Vapor Resource Management Error Vulnerability
vapor is a Swift web development framework for individual developers. Can be used to develop high-performance Web applications , support for iOS, OS X and Ubuntu systems. Vapor versions prior to 4.40.1 have a security vulnerability that can be exploited by attackers to launch DoS attacks...
KLA12110 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...
Important: Red Hat Security Advisory: nodejs:10 security update
An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RLSA-2021:0744 Important: nodejs:14 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 14.16.0. Security Fixes: nodejs: HTTP2 'unknownProtocol' cause DoS by resource...
react-dev-utils Operating system command injection vulnerability
Helper create-react-app is Helper open source an application . It is used to hide code that should not burden the user when popping up. react-dev-utils prior to v11.0.4 An operating system command injection vulnerability exists, which stems from the fact that command injection is possible when th...
CVE-2020-28466
This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightene...
Micro Focus Solutions Business Manager Cross-Site Scripting Vulnerability (CNVD-2021-18312)
Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...
Fedora: Security Advisory for dpdk (FEDORA-2021-fba11d37ee)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GitHub Security Lab: Java : Add query to detect Apache Struts enabled Development mode
This bug was reported directly to GitHub Security Lab...
OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)
Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of th...
JDK: Stack-based buffer overflow when converting from UTF-8 characters to platform encoding
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...
PT-2021-3207
Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the route development module of the LOTCMAN:PLM system. This could allow an attacker to execute arbitrary code by...
Qualys API Best Practices: KnowledgeBase API
This API Best Practices Series shows how to optimize your API usage starting with the KnowledgeBase API. The accompanying video presents these API best practices along with live code examples, so that you can effectively integrate the KnowledgeBase with other data and use it in process automation...
