PT-2021-19848

Name of the Vulnerable Software and Affected Versions Zope versions prior to 5.2.1 and 4.6.1 Description Zope is an open-source web application server. The issue concerns TAL expression traversal vulnerabilities, where most Python modules are not available for use in TAL expressions added through...

Security Bulletin: A security vulnerability in Node.js braces and netmask module affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js braces and netmask module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2018-1109 DESCRIPTION: Node.js braces module is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw. By using a...

python: CRLF injection via HTTP request method in httplib/http.client

A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat fr...

ALEA-2021:1919 new module: python39:3.9

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. This enhancement...

5.30 bug fix and enhancement update

An update is available for perl-Pod-Perldoc, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-Text-Glob, perl-Pod-Simple,...

RLSA-2021:1609 Moderate: p11-kit security, bug fix, and enhancement update

The p11-kit packages provide a mechanism to manage PKCS11 modules. The p11-kit-trust subpackage includes a PKCS11 trust module that provides certificate anchors and black lists based on configuration files. The following packages have been upgraded to a later upstream version: p11-kit 0.23.22...

openSUSE Security Update : virtualbox (openSUSE-2021-630)

This update for virtualbox fixes the following issues : - Version bump to 6.1.20 released April 20 2021 by Oracle Fixes boo1183329 'virtualbox 6.1.18 crashes when it runs nested VM' Fixes boo1183125 'Leap 15.3 installation in Virtualbox without VBox integration' Fixes CVE-2021-2264 and boo1184542...

CVE-2021-32403

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...

Intelbras Router RF 301K 跨站请求伪造漏洞

The Intelbras Router RF 301K is a router from Intelbras in China. A cross-site request forgery vulnerability exists in Intelbras Router RF 301K Firmware 1.1.2, which stems from a lack of authentication and insecure configuration in inputs and modules...

Intelbras Router RF 301K 跨站请求伪造漏洞

The Intelbras Router RF 301K is a router from Intelbras in China. A cross-site request forgery vulnerability exists in Intelbras Router RF 301K Firmware 1.1.2, which stems from the lack of a security mechanism to protect tokens and insecure inputs and modules...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29593 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29564 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29591 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29609 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +18 more potentially affected by CVE-2021-29537 via tensorflow-gpu (>=2.0.0, <=2.1.4)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29574 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29588 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +18 more potentially affected by CVE-2021-29543 via tensorflow-gpu (>=2.0.0, <=2.1.4)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29582 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +84 more potentially affected by CVE-2021-29574 via tensorflow-gpu (>=1.1.0, <=2.1.1)

tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.2, =0.6.7a1, =0.1.2, =0.1.0, =0.1.2 - dragonn 0.4.2 - dream-on-gym 0.0.1 and more Source cves: CVE-2021-29574 Source advisory: MEND:CVE-2021-29574...