13337 matches found
Juniper Networks Releases Security Updates for Multiple Products
Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to cause take control of an affected system. CISA encourages users and administrators to review the Juniper Networks security advisories...
Security Updates for Microsoft Visual Studio Products (January 2021)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1651, CVE-2021-1680 - A denial of service DoS vulnerability. An...
Debian: Security Advisory (DLA-2524-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Releases Security Updates for Multiple Products
Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. CISA encourages user...
Security Updates for Microsoft Office (January 2021) (macOS)
The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities in Word and Excel. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
CVE-2021-1168
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...
Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws
For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability. The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and...
Microsoft Patch Tuesday, January 2021 Edition
Microsoft today released updates to plug more than 80 security holes in its Windows operating systems and other software, including one that is actively being exploited and another which was disclosed prior to today. Ten of the flaws earned Microsofts most-dire "critical" rating, meaning they cou...
Photon OS 2.0: Apache PHSA-2021-2.0-0308
An update of the apache package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14489...
Photon OS 2.0: Openldap PHSA-2021-2.0-0308
An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Glib PHSA-2021-2.0-0308
An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144893;...
Photon OS 3.0: Consul PHSA-2021-3.0-0181
An update of the consul package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0181. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144900;...
Vulnerabilities fixed in Joomla!
Vulnerabilities have been fixed in Joomla! The vulnerabilities allow a remote malicious party to launch a Cross-site scripting attack and to obtain system data. Updates have been released to fix the vulnerabilities. More information can be found on the pages below: CVE-2021-23123:...
Vulnerabilities fixed in Adobe products
Adobe has fixed vulnerabilities in several products from Adobe. The vulnerabilities allow a locally authenticated malicious party to execute arbitrary code under permissions of the application or to obtain elevated privileges. Adobe has released updates to fix the vulnerabilities. More informatio...
Photon OS 1.0: Glibc PHSA-2021-1.0-0353
An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0353. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144896...
Fedora 33 : sympa (2021-11cb6626e2)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-11cb6626e2 advisory. - Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as...
Photon OS 1.0: Glib PHSA-2021-1.0-0351
An update of the glib package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0351. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144901;...
Roundcube Webmail < 1.2.13, 1.3.x < 1.3.16, 1.4.x < 1.4.10 XSS Vulnerability
Roundcube Webmail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SUSE-SU-2021:0096-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0444: Fixed a bad kfree due to a logic error in auditdatatoentry bnc1180027. - CVE-2020-0465: Fixed multiple missing bounds checks in...
