EulerOS 2.0 SP11 : hyperscan (EulerOS-SA-2023-2688)

According to the versions of the hyperscan packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Improper buffer restrictions in the Hyperscan library maintained by IntelR all versions downloaded before 04/29/2022 may allow an...

EulerOS Virtualization 2.11.0 : libX11 (EulerOS-SA-2023-3073)

According to the versions of the libX11 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that t...

EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-2849)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users...

EulerOS 2.0 SP10 : binutils (EulerOS-SA-2023-2779)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils. CVE-2023-25584 Note that Tenable Network...

EulerOS 2.0 SP11 : golang (EulerOS-SA-2023-3242)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The html/template package does not properly handle HTML-like '' comment tokens, nor hashbang '!' comment tokens, in contexts. This may cause the...

EulerOS 2.0 SP8 : linux-firmware (EulerOS-SA-2023-3137)

According to the versions of the linux-firmware packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive...

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Multiple security vulnerabilities have been disclosed in Bosch BCC100 thermostats and Rexroth NXA015S-36V-B smart nutrunners that, if successfully exploited, could allow attackers to execute arbitrary code on affected systems. Romanian cybersecurity firm Bitdefender, which discovered the flaw in...

Important Photon OS Security Update - PHSA-2024-5.0-92-0190

Updates of 'nss' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-5.0-91-0190

Updates of 'nss' packages of Photon OS have been released...

RLSA-2024:0105 Moderate: nss security update

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 For more details about the security issues, including the impact, a CV...

CVE-2023-49254

CVE-2023-49254 describes authenticated command execution in the context of the root user via the destination field of network test tools. The initial description notes a mitigation from CVE-2021-28151 (UI-level blacklisting of characters) that is bypassable via direct POST requests, indicating a ...

[SECURITY] Fedora 39 Update: openssh-9.3p1-10.fc39

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

CVE-2024-21601

CVE-2024-21601 affects Juniper Networks Junos OS on SRX Series. A race condition in the Flow-processing Daemon (flowd) occurs when two threads simultaneously process the queue used for TCP events, causing flowd to crash. This allows an unauthenticated, network-based attacker to trigger a Denial-o...

CVE-2024-21597

Summary: CVE-2024-21597 is a Juniper MX Series Junos OS vulnerability in the Packet Forwarding Engine (PFE) where, in an AF scenario with routing-instances, valid traffic can bypass lo0 firewall filters. This allows an unauthenticated, network-based attacker to bypass intended access restrictions...

CVE-2024-21597 Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

Juniper Networks Junos OS Competitive Conditions Issue Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which is caused by a race condition...

CVE-2024-21821

CVE-2024-21821 affects TP-LINK routers (e.g., Archer AX3000, AX5400, AXE75). A network-adjacent authenticated attacker with LAN/Wi‑Fi access can execute arbitrary OS commands due to inadequate input handling in the device OS. CVSS 3.1 base score 8.0 (ADJACENT, LOW{PR:L}, UI: NONE; impact C/I/A: H...

CVE-2024-21773

TP-LINK CVE-2024-21773 is an OS command injection affecting multiple TP-LINK devices. According to JVNDB, affected products include Archer AX3000 (JP) with firmware < 1.1.2 Build 20231115, Archer AX5400 (JP) < 1.1.2 Build 20231115, Deco X50 (JP) < 1.4.1 Build 20231122, and Deco XE200 (JP)

5 ways to secure identity and access for 2024

The security landscape is changing fast. In 2023, we saw a record-high 30 billion attempted password attacks per month, a 35% increase in demand for cybersecurity experts, and a 23% annual rise in cases processed by the Microsoft Security Response Center and Security Operations Center teams.1 Thi...

ALSA-2024:0105 Moderate: nss security update

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: timing attack against RSA decryption CVE-2023-5388 For more details about the security issues, including the impact, a CV...