12583 matches found
Citrix Workspace App - Fresh install/Update operation of CWA App may result in delay for about 10 - 30 mins
CWA Windows app installer gets stuck/hung for an extended time during installation/Updation and eventually succeedsTypically after 10 - 30mins. Users might experience delays in the installer/upgrade workflow...
OPENSUSE-SU-2021:3949-1 Security update for clamav
This update for clamav fixes the following issues: - Update to 0.103.4 bsc1192346. - Update to 0.103.3 bsc1188284...
MGASA-2021-0535 Updated vim packages fix security vulnerability
Multiple Heap-based Buffer Overflows Stack-based Buffer overflows and a use after free...
Schneider Electric Software Update 安全特征问题漏洞
Schneider Electric Software Update is a software update tool for Schneider Electric products from Schneider Electric France. A security signature issue vulnerability exists in Schneider Electric Software Update SESU that stems from An entropy insufficiency vulnerability exists in Schneider Electr...
Schneider Electric SESU
1. EXECUTIVE SUMMARY CVSS v3 3.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Schneider Electric Software Update SESU Vulnerability: Insufficient Entropy 2. RISK EVALUATION Successful exploitation of this vulnerability could cause unintended connection from an internal...
Security Advisory - Buffer Overflow Vulnerability in Some Huawei Products
There is a buffer overflow vulnerability in DOPRA SSP products. An attacker can exploit this vulnerability by sending a specific message to the target device due to insufficient validation of packets. Successful exploit could cause a denial of service condition. Vulnerability ID: HWPSIRT-2020-823...
OPENSUSE-SU-2021:3815-1 Security update for netcdf
This update for netcdf fixes the following issues: - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,...
Trend Micro Antivirus for MAC vulnerable to improper access controls
Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for MAC. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A user who can login to the system where the affected product is installed may...
PT-2021-16367
Name of the Vulnerable Software and Affected Versions: Smash Balloon Social Post Feed WordPress plugin versions prior to 4.0.1 Description: The issue allows any logged-in user on a vulnerable site to update the plugin's settings without proper privilege or nonce validation. This enables the stora...
Multiple vulnerabilities in baserCMS
Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2021-41243 Arbitrary code upload vulnerability in Database restore CWE-434 - CVE-2021-41279 CVE-2021-41243 Akagi Yusuke of NTT-ME CORPORATION reported this...
MGASA-2021-0515 Updated arpwatch packages fix security vulnerability
A symbolic link Symlink following vulnerability in arpwatch allows local attackers with control of the runtime user to run arpwatch and to escalate to root upon the next restart of arpwatch. CVE-2021-25321...
MGASA-2021-0516 Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to 96.0.4664.45 version that fixes multiples security vulnerabilities. For changes from 94.0.4606.71 released on September 30, 2021 to the 96.0.4664.45 version, see referenced advisories...
Patch now! FatPipe VPN zero-day actively exploited
According to its marketing team, a FatPipe MPVPN can make your VPN "900% more secure." Well, I dont know about that, but I do know a way to make your MPVPN admin console 100% more secure, and that you should do so right away, by installing the latest version of its software. Why? Because older...
Security Alert - CVE's Addressed in Avalanche 6.3.3
Last Modified Date Dec 10, 2021 8:13:44 AM...
OPENSUSE-SU-2021:1481-1 Security update for transfig
This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b Aug 2021 - bsc1190618, CVE-2020-21529: stack buffer overflow in the bezierspline function in genepic.c. - bsc1190615, CVE-2020-21530: segmentation fault in the readobjects function in read.c. -...
Cisco Common Services Platform Collector SQL Injection Vulnerability
A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to submit a SQL query through the CSPC configuration dashboard. This vulnerability is due to insufficient input validation of uploaded files. An attacker...
Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...
PT-2021-12917 · Intel · Intel Iris Xe Max Dedicated Graphics Drivers
Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 10 versions prior to 27.20.100.9466 Description: The issue is related to improper access control in the installer for some IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 1...
rwtxt vulnerable to cross-site scripting
Overview rwtxt provided by Zack Scholl is a light-weight content management system CMS that enables to share and/or view any text saved online. rwtxt contains a cross-site scripting vulnerability CWE-79. Ito Reo of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/C...