RHEL 7 : java-1.7.1-ibm (RHSA-2021:0733)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0733 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...

CVE-2021-21293

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded connection acceptance leads to file handle exhaustion. Blaze, accepts connections unconditionally on a...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:4347)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4347 advisory. - OpenJDK: High memory usage during deserialization of Proxy class with many interfaces Serialization, 8236862 CVE-2020-14779 - OpenJDK: Credentials se...

CentOS 8 : pki-deps:10.6 (CESA-2019:1529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1529 advisory. - tomcat: Open redirect in default servlet CVE-2018-11784 - tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins...

OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS

A flaw was found in xnio. A file descriptor leak caused by growing amounts of NIO Selector file, handled between garbage collection cycles, may allow the attacker to cause a denial of service. The highest threat from this vulnerability is to system availability...

AZL-25952 CVE-2020-8908 affecting package guava for versions less than 25.0-7

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

Updated java-1.8.0-openjdk packages fix security vulnerabilities

High memory usage during deserialization of Proxy class with many interfaces. CVE-2020-14779 Credentials sent over unencrypted LDAP connection. CVE-2020-14781 Certificate blacklist bypass via alternate certificate encodings. CVE-2020-14782 Integer overflow leading to out-of-bounds access...

CVE-2020-25155

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 all versions...

CVE-2020-25151

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 all versions...

Information disclosure

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 all versions...

Input validation

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 all versions...

CVE-2020-25151

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 all versions...

CVE-2020-25151

CVE-2020-25151 affects NEXCOM NIO 50 devices. The vulnerability arises from improper input validation in the device, potentially enabling a denial-of-service condition on all versions. NVD notes CVSSv3.1 impact: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5). Public exploitation details are...

CVE-2020-25155

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 all versions...

CVE-2020-25155

CVE-2020-25155 affects NEXCOM NIO 50 devices; the vulnerability is cleartxt transmission of sensitive information (cleartext transmission of sensitive data). All versions of NIO 50 are affected. The issue arises from transmitting unencrypted sensitive information, which may allow an attacker to a...

PT-2020-15988

Name of the Vulnerable Software and Affected Versions NIO 50 all versions Description The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information. Recommendations For NIO 50 all versions, consider implementing encryption for sensitive...

PT-2020-15986

Name of the Vulnerable Software and Affected Versions NIO 50 all versions Description The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack. Recommendations For all versions, consider implementing proper input validation to preven...

CVE-2020-25151: Improper Input Validation

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 all versions...

CVE-2020-25155: Cleartext Transmission of Sensitive Information

The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 all versions...