13104 matches found
ASB-A-187074563
Bulletin has no description...
ASB-A-195962697
In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-197536150
In gattprocessnotification of gattcl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-187073200
Bulletin has no description...
GSD-2021-1001837 isdn: mISDN: Fix sleeping function called from invalid context
isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...
UVI-2021-1001827 net: encx24j600: check error in devm_regmap_init_encx24j600
net: encx24j600: check error in devmregmapinitencx24j600 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.155 by commit...
UVI-2021-1001791 ocfs2: mount fails with buffer overflow in strlen
ocfs2: mount fails with buffer overflow in strlen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...
UVI-2021-1001788 isdn: mISDN: Fix sleeping function called from invalid context
isdn: mISDN: Fix sleeping function called from invalid context This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.253 by commit...
DSA-4994-1 bind9 - security update
Bulletin has no description...
MGASA-2021-0492 Updated opencryptoki packages fix security vulnerability
It was discovered that openCryptoki incorrectly handled certain EC keys. An attacker could possibly use this issue to cause a invalid curve attack...
Remote Code Execution (RCE)
Storm core is vulnerable to remote code execution RCE attacks. Vulnerable getGroupsCommand function is subject to unsafe deserialization, allowing remote authenticated attackers to execute arbitrary code in the server...
CVE-2021-35646 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-35634 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-35627 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-35625 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-35622 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-35612 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2479 vulnerabilities
Vulnerabilities for packages: mysql...
SUSE-SU-2021:3481-1 Security update for postgresql10
This update for postgresql10 fixes the following issues: - Fix for build with llvm12 on s390x. bsc1185952 - Re-enable 'icu' for PostgreSQL 10. bsc1179945 - Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. bsc1187751 - Upgrade to version 10.18. bsc1190177 Upgrade to...