Security Bulletin: WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20454)

Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...

Security Bulletin: Vulnerability in Dojo affects WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2020-5258)

Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...

PT-2021-28935

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v4.14.233 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.14.233. Recommendations For versions...

PT-2021-28723

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v5.12.4 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.12.4. Recommendations For versions pri...

PT-2021-28829

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v5.10.37 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.10.37. The actual impact and attack...

PT-2021-28947

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v4.9.269 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.9.269. The actual impact and attack...

PT-2021-24897

Name of the Vulnerable Software and Affected Versions: liquidio versions prior to v5.4.119 Description: The issue concerns an unintended sign extension of a left shift of a u16 value. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.4.119. The actual impact and...

PT-2021-24953

Name of the Vulnerable Software and Affected Versions: liquidio versions prior to v4.9.269 Description: The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.9.269. The actual impact and attack...

PT-2021-28891

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v5.4.119 Description The issue concerns an unintended sign extension of a left shift of a u16 value. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.4.119. The actual impact and...

PT-2021-24729

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v5.12.4 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.12.4. Recommendations For versions pri...

PT-2021-24925

Name of the Vulnerable Software and Affected Versions: liquidio versions prior to v4.19.191 Description: The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.19.191. The actual impact and atta...

PT-2021-28919

Name of the Vulnerable Software and Affected Versions liquidio versions prior to v4.19.191 Description The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.19.191. The actual impact and attack...

PT-2021-24941

Name of the Vulnerable Software and Affected Versions: liquidio versions prior to v4.14.233 Description: The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v4.14.233. The actual impact and atta...

PT-2021-24835

Name of the Vulnerable Software and Affected Versions: liquidio versions prior to v5.10.37 Description: The issue concerns an unintended sign extension of a left shift of a u16. This problem was introduced in version v4.9 and is fixed in Linux Kernel version v5.10.37. The actual impact and attack...

Authentication flaw

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

PYSEC-2021-87

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629: Access of Memory Location After End of Buffer

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

PT-2021-19817

Name of the Vulnerable Software and Affected Versions Cranelift versions 0.73.0 Description There is a bug in the Cranelift x64 backend that can create a scenario resulting in a potential sandbox escape in a WebAssembly module. The bug performs a sign-extend instead of a zero-extend on a value...