ALSA-2021:1600 Moderate: opensc security, bug fix, and enhancement update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fixes: opensc: heap-based buffer overflow in...

opensc security, bug fix, and enhancement update

An update is available for opensc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSC set of libraries and utilities provides support for working with...

Moderate: opensc security, bug fix, and enhancement update

The OpenSC set of libraries and utilities provides support for working with smart cards. OpenSC focuses on cards that support cryptographic operations and enables their use for authentication, mail encryption, or digital signatures. Security Fixes: opensc: heap-based buffer overflow in...

openSUSE Security Update : monitoring-plugins-smart (openSUSE-2021-706)

This update for monitoring-plugins-smart fixes the following issues : monitoring-plugins-smart was updated to 6.9.1 : This is a security-release boo1183057 + Fixes the regular expression for pseudo-devices under the /dev/bus/N path. from 6.9.0 + Allows using PCI device paths as device names 64 +...

AC centralized management platform has information leakage vulnerability

Ltd. is a network total solution and smart home solution provider. There is an information leakage vulnerability in AC centralized management platform, which can be exploited by attackers to obtain sensitive information...

There is a file upload vulnerability in Tianzhi Smart Hospital Integrated Quality Supervision Platform

Shenzhen Qianhai Tianzhi Information Technology Co., Ltd. is a national high-tech enterprise which firstly focuses on the management of hospital grade evaluation and the informationization construction of hospital comprehensive quality supervision platform. A file upload vulnerability exists in t...

Information leakage vulnerability in the smart payment platform of Guilin Jiapeng Information Technology Co. Ltd (CNVD-2021-39022)

Guilin Jiapeng Information Technology Co., Ltd. specializes in school fee system development. There is an information leakage vulnerability in Guilin Jiapeng Information Technology Limited smart fee payment platform. Attackers can use the vulnerability to obtain sensitive information...

Improper Authorization

Overview smartproxyshellhooks is a Provides easy integration with 3rd parties for Foreman Affected versions of this package are vulnerable to Improper Authorization. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server...

CVE-2021-3457

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

CVE-2021-3457

An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a...

CVE-2021-3457

CVE-2021-3457 describes an improper authorization flaw in the Foreman Shellhooks plugin for the smart-proxy. The vulnerability allows an authenticated local attacker to access and delete resources and can cause a denial of service on the Foreman server. Affected component: smart_proxy_shellhooks ...

openSUSE: Security Advisory for monitoring-plugins-smart (openSUSE-SU-2021:0706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in ECS Production, Supply, and Marketing Management and Control Integration System

Ltd. is an Internet software development and system integration enterprise relying on Internet information and Internet of Things IoT technology to provide enterprises with complete smart factory solutions. A SQL injection vulnerability exists in Easys' integrated production, supply, and marketin...

Security update for monitoring-plugins-smart (important)

openSUSE Security Update: Security update for monitoring-plugins-smart Announcement ID: openSUSE-SU-2021:0706-1 Rating: important References: 1183057 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 An update that contains security fixes can now be...

Command Execution Vulnerability in Panabit Smart Application Gateway

Panabit's Layer 4 to Layer 7 Intelligent Gateways, customized specifically for SMB users, can address a range of real-world needs from network access, multi-line aggregation, application optimization, load balancing, behavioral management, user authentication, WIFI bandwidth protection, log...

Weak Password Vulnerability in Smart Factory of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A weak password vulnerability exists in UFIDA Smart Factory, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in the smart hospital system of Shenzhen Coordinate Software Group Co.

Shenzhen Coordinate Software Group Co., Ltd. covers medical informatization eco-products smart hospitals, internet healthcare, regional medical consortium/medical community platforms, medical big data and solutions around this system. Shenzhen Coordinate Software Group Limited smart hospital syst...

Fee Distribution Re-Entrancy

Handle 0xsomeone Vulnerability details Impact The distribute function of NFTXFeeDistributor has no access control and will invoke a fallback on the fee receivers, meaning that a fee receiver can re-enter via this function to acquire their allocation repeatedly potentially draining the full balanc...

May 4, 2021, update for Outlook 2016 (KB5001921)

None None...

Smart Access Filters does not work for devices accessing via Secure Hub / Citrix Endpoint Management (XenMobile)

Smart Access Filters does not work for the ICA traffic originating from Secure Hub / Citrix Endpoint Management XenMobile. The Smart Access Filters work as expected for sessions launched via the NetScaler Gateway - OnlySecure Hub / Citrix Endpoint Management XenMobile session are affected...