Eclipse Jetty DoS Vulnerability (GHSA-26vr-8j45-3r4w) - Linux

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

The vulnerability of the Apex One and OfficeScan antivirus software lies in the insufficient checking of privilege assignments for critical resources, allowing a hacker to trigger a service failure.

The vulnerability of the anti-virus software programs Apex One and OfficeScan is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability can allow a hacker to cause service failures...

SUSE: Security Advisory (SUSE-SU-2018:2223-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-202106-25] python-urllib3: denial of service

Arch Linux Security Advisory ASA-202106-25 ========================================== Severity: Medium Date : 2021-06-09 CVE-ID : CVE-2021-33503 Package : python-urllib3 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2038 Summary ======= The package python-urllib3...

RHEL 7 : microcode_ctl (RHSA-2021:2301)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2301 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

The vulnerability of the Apex One and OfficeScan antivirus software lies in the insufficient checking of privilege assignments for critical resources, allowing attackers to increase their privileges.

The vulnerability of the anti-virus software programs Apex One and OfficeScan is related to insufficient checking of privilege assignments for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

RHEL 7 : microcode_ctl (RHSA-2021:2305)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2305 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

Security Bulletin: IBM DataPower Gateway is affected by Denial of Service vulnerabilities

Summary IBM DataPower Gateway has addressed the following vulnerabilities: CVE-2019-9513 CVE-2019-9511 Vulnerability Details CVEID: CVE-2019-9513 DESCRIPTION: Multiple vendors are vulnerable to a denial of service, caused by a Resource Loop attack. By creating multiple request streams and...

UBUNTU-CVE-2020-24511

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Intel Processors 信息泄露漏洞

Intel Processors are a U.S. Intel company that provide for the interpretation of computer instructions and the processing of data in computer software. An information disclosure vulnerability exists in Intel Processors that arises from improper isolation of shared resources. An authenticated...

Intel Processors 信息泄露漏洞

Intel Processors are a U.S. Intel company that provide for the interpretation of computer instructions and the processing of data in computer software. An information disclosure vulnerability exists in Intel Processors that arises from improper isolation of shared resources. An authenticated...

Intel Processors 缓冲区错误漏洞

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. A buffer error vulnerability exists in the firmware of Intel Processors, which arises from mismanagement of system resources by a networked system or produc...

Security and Human Behavior (SHB) 2021

Today is the second day of the fourteenth Workshop on Security and Human Behavior. The University of Cambridge is the host, but were all on Zoom. SHB is a small, annual, invitational workshop of people studying various aspects of the human side of security, organized each year by Alessandro...

CVE-2020-14371

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite...

Design/Logic Flaw

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite...

Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks

A top Russian-language underground forum has been running a "contest" for the past month, calling on its community to submit "unorthodox" ways to conduct cryptocurrency attacks. The forum's administrator, in an announcement made on April 20, 2021, invited members to submit papers that assess the...

CVE-2020-14371

A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on these resources in Satellite...

CVE-2020-14371

CVE-2020-14371 describes a credential-leak vulnerability in Red Hat Satellite that exposes compute resources credentials through virtual machines running on Satellite resources. The issue appears in the Satellite deployment context and is documented in both the NVD entry and Red Hat security refe...

IBM Cognos Analytics XML External Entity Injection Vulnerability (CNVD-2021-38673)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics suffers fr...

File upload vulnerability in the teaching resources service management platform of Wuhan Dongxin Tongbang Information Technology Co.

Teaching Resources Service Management Platform is a system based on B/S architecture, adopting the concept of multi-level platform design, with the core functions of educational resources aggregation, categorization and storage, regional sharing, etc., and supporting activities such as remote...