Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

Design/Logic Flaw

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT...

PT-2020-20120

Name of the Vulnerable Software and Affected Versions Lenovo Desktop and Workstation systems affected versions not specified Description The issue concerns Lenovo Desktop and Workstation systems that were shipped with the Embedded Host Based Configuration EHBC feature of Intel AMT enabled prior t...

Internet Explorer help

Internet Explorer help Internet Explorer 11 support ended Support for Internet Explorer 11 ended on June 15, 2022. If any site you visit needs Internet Explorer, you can reload it with Internet Explorer mode in Microsoft Edge. Get started with Microsoft Edge Make the switch from Internet Explorer...

Libraries Component Data Modification

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data...

Libraries Component Unauthorized Access

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Serialization Component DoS

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Hotspot Component Unauthorized Access Data Modification

The vulnerability of the Hotspot component in Java SE and Java SE Embedded software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or to modify, add, or delete data...

JNDI Component Unauthorized Access

The vulnerability of the JNDI component in Java SE and Java SE Embedded programming platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SQL Injection Vulnerability in Embedded High Definition Recording and Playback System of Guangzhou Haisheng Computer Technology Co.

Embedded high-definition recording and broadcasting system adopts high-performance SOC processor, which can realize 1080P encoding display up to 60 frames per second, support POC power supply function, a standard SDI cable can realize video transmission, power supply and PTZ control and other...

org.mortbay.jetty.example:jetty-embedded (7.0.0.pre4), org.mortbay.jetty:jetty-annotations (7.0.0.pre4) +12 more potentially affected by CVE-2020-27216 via org.mortbay.jetty:jetty-webapp (7.0.0.pre4)

org.mortbay.jetty:jetty-webapp MAVEN version 7.0.0.pre4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mortbay.jetty:jetty-webapp and may be impacted: - org.mortbay.jetty.example:jetty-embedded 7.0.0.pre4 - org.mortbay.jetty:jetty-annotations...

org.eclipse.jetty:jetty-annotations (7.0.0.m0), org.eclipse.jetty:jetty-deploy (7.0.0.m0) +7 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.0.0.m0)

org.eclipse.jetty:jetty-webapp MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty:jetty-annotations 7.0.0.m0 - org.eclipse.jetty:jetty-deploy 7.0.0.m0 -...

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2020-2352)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS XE Software for ASR 1000 Series 20 Gbps Embedded Services Processor IP ARP DoS (cisco-sa-esp20-arp-dos-GvHVggqJ)

According to its self-reported version and configuration, the Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP running on the remote device is affected by a denial of service vulnerability. An unauthenticated, adjacent...

EulerOS 2.0 SP2 : java-1.8.0-openjdk (EulerOS-SA-2020-2352)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected...

CVE-2020-8240

A vulnerability in the Pulse Secure Desktop Client 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the...

CVE-2020-8240

A vulnerability in the Pulse Secure Desktop Client 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the...

CVE-2020-8240

A vulnerability in the Pulse Secure Desktop Client 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges if the Embedded Browser is configured with Credential Provider. This vulnerability only affects Windows PDC if the Embedded Browser is configured with the...