PT-2021-23030 · Mkdocs +1 · Mkdocs +1

Name of the Vulnerable Software and Affected Versions: mkdocs version 1.2.2 Description: The mkdocs built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Recommendations: For mkdocs version 1.2.2, as a temporary workaroun...

Security Bulletin: IBM Security Guardium Insights is affected by Components with known vulnerabilities

Summary IBM Security Guardium Insights has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2019-16869 DESCRIPTION: Netty is vulnerable to HTTP request smuggling, caused by a flaw when handling unusual whitespaces before the colon in HTTP headers. By sending a...

Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Windows

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Mitre Corporation Gfos Workforce Management 授权问题漏洞

Gfos Workforce Management, a workforce management system from Mitre Corporation, U.S.A. A security vulnerability exists in Gfos Workforce Management, which stems from poor JSESSIONID management, where the application's login page is prone to bypass authentication and an attacker can use...

Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users

A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems. Attacks mounted by the hacking group, dubbed GhostEmperor by Kaspersky,...

SUSE SLES15 Security Update : shibboleth-sp (SUSE-SU-2021:3244-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3244-1 advisory. - Template generation allows external parameters to override placeholders bsc1184222 Tenable has extracted the preceding description block directly fro...

Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation

Summary IBM Business Process Manager and IBM Business Automation Workflow offline documentation packages open source libraries with known vulnerabilities. Do not install offline documentation and remove existing installations with the fix provided below. Vulnerability Details CVEID: CVE-2021-2335...

Apache Struts RCE Vulnerability (S2-048) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Microsoft Windows Multiple Vulnerabilities (KB5005568)

This host is missing a critical security update according to Microsoft KB5005568 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

September 14, 2021—KB5005565 (OS Builds 19041.1237, 19042.1237, and 19043.1237)

None None...

September 14, 2021—KB5005618 (Security-only update)

None None...

September 14, 2021—KB5005569 (OS Build 10240.19060) - EXPIRED

None None...

September 14, 2021—KB5005573 (OS Build 14393.4651) - EXPIRED

None None...

September 14, 2021—KB5005606 (Monthly Rollup)

None None...

September 14, 2021—KB5005627 (Security-only update)

None None...

September 14, 2021—KB5005568 (OS Build 17763.2183)

None None...

September 14, 2021—KB5005613 (Monthly Rollup)

None None...

CVE-2021-37192

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve a list of network devices a known user can manage...

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user...

CVE-2021-37190

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.0 SP2. The affected software has an information disclosure vulnerability that could allow an attacker to retrieve VPN connection for a known user...