3815 matches found
GSD-2021-1002844 hamradio: improve the incomplete fix to avoid NPD
hamradio: improve the incomplete fix to avoid NPD This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
GSD-2021-1002783 hamradio: improve the incomplete fix to avoid NPD
hamradio: improve the incomplete fix to avoid NPD This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.260 by commit...
GSD-2021-1002778 hamradio: improve the incomplete fix to avoid NPD
hamradio: improve the incomplete fix to avoid NPD This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.295 by commit...
PT-2021-27258
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.223 Description The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27269
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.169 Description The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2021-27246
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.295 Description The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27312
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.12 Description: The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2021-27251
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.260 Description The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27283
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.89 Description The issue is related to an incomplete fix that may lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-27242
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.297 Description The issue is related to an incomplete fix that may lead to security concerns. The actual impact and potential for attacks have not been confirmed yet. Recommendations For Linux Kernel version...
CVE-2021-45884
In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue...
Design/Logic Flaw
In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue...
CVE-2021-45884
In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue...
CVE-2021-23574
All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...
CVE-2021-23574: Improperly Controlled Modification of Object Prototype Attributes
All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...
Debian: Security Advisory (DSA-5022-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5022-1] apache-log4j2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5022-1 [email protected] https://www.debian.org/security/ Markus Koschany December 16, 2021 https://www.debian.org/security/faq -...
CVE-2021-4125
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. Mitigation Please follow the Mitigation advice for the original CVEs...
USN-5197-1 apache-log4j2 vulnerability
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. An attacker could use this vulnerability to cause a denial of service. Please see the following link for more information:...
