OPENSUSE-SU-2021:0521-1 Security update for fwupdate

This update for fwupdate fixes the following issues: - Add SBAT section to EFI images bsc1182057 This update was imported from the SUSE:SLE-15-SP1:Update update project...

SUSE-SU-2021:1111-1 Security update for fwupdate

This update for fwupdate fixes the following issues: - Add SBAT section to EFI images bsc1182057...

SUSE-SU-2021:1104-1 Security update for fwupdate

This update for fwupdate fixes the following issues: - Add SBAT section to EFI images bsc1182057...

SUSE-SU-2021:1103-1 Security update for fwupdate

This update for fwupdate fixes the following issues: - Add SBAT section to EFI images bsc1182057...

CVE-2021-1137

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details secti...

PT-2021-28417

Name of the Vulnerable Software and Affected Versions: fwupdate affected versions not specified Description: The issue with fwupdate involves adding an SBAT section to EFI images. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...

PT-2021-28415

Name of the Vulnerable Software and Affected Versions: fwupdate affected versions not specified Description: The issue concerns the addition of an SBAT section to EFI images. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2021-28416

Name of the Vulnerable Software and Affected Versions: fwupdate affected versions not specified Description: The issue with fwupdate involves adding an SBAT section to EFI images. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2021-27336

Name of the Vulnerable Software and Affected Versions: fwupdate affected versions not specified Description: The issue with fwupdate involves adding an SBAT section to EFI images. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

Scylla - The Simplistic Information Gathering Engine | Find Advanced Information On A Username, Website, Phone Number, Etc...

Scylla is an OSINT tool developed in Python 3.6. Scylla lets users perform advanced searches on Instagram & Twitter accounts, websites/webservers, phone numbers, and names. Scylla also allows users to find all social media profiles main platforms assigned to a certain username. In continuation,...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CentOS: Security Advisory for firefox (CESA-2021:0992)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GNU Binutils 缓冲区错误漏洞

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A heap buffer overflow vulnerability exists in bfdelfslurpsecondaryrelocsection in elf.c in GNU Binutils version 2.35.1. The vulnerability stems fr...

CVE-2021-25921

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly in the Allergies section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit...

CVE-2021-25921

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly in the Allergies section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit...

CVE-2021-25921

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly in the Allergies section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit...

CVE-2021-25921: Improper Neutralization of Input During Web Page Generation

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly in the Allergies section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit...

PT-2021-16851

Name of the Vulnerable Software and Affected Versions OpenEMR versions 2.7.3-rc1 through 6.0.0 Description The issue is related to a Stored Cross-Site-Scripting XSS attack due to improper validation of user input in the Allergies section. An attacker could trick an administrator into entering a...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Tecnoteca openMAINT 跨站脚本漏洞

Tecnoteca openMAINT is an application from the Italian company Tecnoteca. It is based on the CMDBuild software, from which it inherits basic functionality and configuration mechanisms. A security vulnerability exists in openMAINT 2.1-3.3-b, which can be exploited by remote attackers to inject...