Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Tivoli Netcool Performance Manager for Wireline October 2020 CPU

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition, Version that is used by Tivoli Netcool Performance Manager. This issues is disclosed as part of the IBM Java SDK updates for October 2020. Information about a security vulnerability affecting IBM WebSphere Application Server...

Chromium CVE-2021-21184: Inappropriate implementation in performance APIs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21183: Inappropriate implementation in performance APIs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12107 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...

Unspecified Vulnerability in HCL OneTest

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...

Troubleshooting ICA Session Performance

Citrix Technical Support often receives inquiries regarding the performance or the responsiveness of sessions. This article assumes the ICA session has started and has not been disconnected. CTX708444 – Configuring TCP KeepAlive Values to Improve WAN Links and ICA KeepAlives to Place ICA Session ...

kernel: performance counters race condition use-after-free

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integri...

Remote code execution

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

OPENSUSE-SU-2021:0374-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u282 icedtea 3.18.0 January 2021 CPU bsc1181239 Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

Google Chrome Performance API Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...

Citrix Workspace App Assistance for Non-Admins

Clickhere to download Citrix Workspace App. You have been directed to this article because you have questions about or need assistance with Citrix Workspace app and you are NOT an administrator or technical contact for your organization. As a non-admin user of Citrix Workspace app, you must conta...

Google Chrome Performance API Security Bypass Vulnerability (CNVD-2021-14185)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the Google Chrome Performance API. An attacker can exploit this vulnerability to bypass security restrictions...

Qualys API Best Practices: KnowledgeBase API

This API Best Practices Series shows how to optimize your API usage starting with the KnowledgeBase API. The accompanying video presents these API best practices along with live code examples, so that you can effectively integrate the KnowledgeBase with other data and use it in process automation...

CVE-2020-4726

The IBM Application Performance Monitoring UI IBM Cloud APM 8.1.4 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975...

CVE-2020-4726

The IBM Application Performance Monitoring UI IBM Cloud APM 8.1.4 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975...

MediaTek performance driver buffer overflow vulnerability

MediaTek performance driver is a performance driver from China MediaTek MediaTek. It provides performance optimization and repair features. A buffer overflow vulnerability exists in MediaTek performance driver, which stems from a lack of boundary checking and can be exploited by an attacker to...

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

CVE-2021-0405

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

CVE-2021-0405

In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...