11010 matches found
CVE-2020-14247
Summary: CVE-2020-14247 affects HCL OneTest Performance versions 9.5, 10.0 and 10.1. The vulnerability arises from an inadequate session timeout, which could allow an attacker to guess and reuse a valid session ID. What’s affected: HCL OneTest Performance (V9.5, V10.0, V10.1). Root cause: Inadequ...
CVE-2020-14247
HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...
glibc, nscd security update
CentOS Errata and Security Advisory CESA-2021:0348 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
HCL OneTest 代码问题漏洞
HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...
HCL OneTest 安全漏洞
HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...
Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09295)
Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in Cisco IOS XR's IPv6 protocol processing. The vulnerability stems from the software not properly forwarding IPv6 packets that have an IPv6 no...
A New Linux Malware Targeting High-Performance Computing Clusters
High-performance computing clusters belonging to university networks as well as servers associated with government agencies, endpoint security vendors, and internet service providers have been targeted by a newly discovered backdoor that gives attackers the ability to execute arbitrary commands o...
A New Linux Malware Targeting High-Performance Computing Clusters
High-performance computing clusters belonging to university networks as well as servers associated with government agencies, endpoint security vendors, and internet service providers have been targeted by a newly discovered backdoor that gives attackers the ability to execute arbitrary commands o...
[SECURITY] Fedora 32 Update: wavpack-5.4.0-1.fc32
WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...
CVE-2021-21287
Summary: CVE-2021-21287 affects MinIO Browser API. Before version RELEASE.2021-01-30T00-20-58Z, the server is vulnerable to a Server-Side Request Forgery (SSRF) in URL-related functionality (importing/publishing/reading from a URL). An attacker can trick the server into issuing requests to intern...
Important: Red Hat Bug Fix Advisory: Red Hat OpenShift Container Storage 4.6.2 container bug fix update
Updated container images that fix various bugs are now available for Red Hat Openshift Container Storage 4.6.2 from Red Hat Container Registry. Red Hat OpenShift Container Storage is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat...
Security Bulletin: IBM Network Performance Insight 1.3.1 affected by Apache Cassandra vulnerability (CVE-2020-13946)
Summary IBM Network Performance Insight 1.3.1 affected by Apache Cassandra vulnerability CVE-2020-13946 Vulnerability Details CVEID: CVE-2020-13946 DESCRIPTION: Apache Cassandra is vulnerable to a man-in-the-middle attack, caused by a RMI rebind vulnerability. By manipulating the RMI registry, an...
Security Bulletin: IBM Network Performance Insight 1.3.1 affected by Eclipse Jetty vulnerability (CVE-2020-27216)
Summary IBM Network Performance Insight1.3.1 affected by Eclipse Jetty vulnerability CVE-2020-27216 Vulnerability Details CVEID: CVE-2020-27216 DESCRIPTION: Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition in the creati...
openSUSE Security Update : chromium (openSUSE-2021-173)
This update for chromium fixes the following issues : chromium was updated to 88.0.4324.96 boo1181137 - CVE-2021-21117: Insufficient policy enforcement in Cryptohome - CVE-2021-21118: Insufficient data validation in V8 - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free in...
How to Change High Availability Timeout Settings
This article describes how to increase High Availability HA timeout, for pools in danger of fencing with, because of existing timeout values. Requirements Licensed XenServer Pool with three or more hosts A dedicated HA storage repository Background By default, the timeout settings for HA are...
Fedora: Security Advisory for firefox (FEDORA-2021-750c85601a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-21254
CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...
CVE-2021-21254 Regular expression Denial of Service in Markdown plugin
CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...
CKEditor 5 Markdown plugin Regular expression Denial of Service
Impact A regular expression denial of service ReDoS vulnerability has been discovered in the CKEditor 5 Markdown plugin code. The vulnerability allowed to abuse a link recognition regular expression, which could cause a significant performance drop resulting in a browser tab freeze. It affects al...