The iOS 15 Privacy Settings You Should Change Right Now

Apple’s latest software update has a bunch of new security features. Here's how to put them to use...

DLA-2760-1 nettle - security update

Bulletin has no description...

CVE-2021-40825

nLight ECLYPSE nECY system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an affected device. nECY system controllers utilize an encrypted channel to secure SensorViewTM...

CVE-2021-40825

nLight ECLYPSE nECY system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an affected device. nECY system controllers utilize an encrypted channel to secure SensorViewTM...

CVE-2021-40825

CVE-2021-40825 affects Acuity Brands nLight ECLYPSE (nECY) system controllers running software older than 1.17.21245.754. The issue is described as a default key vulnerability where the device does not force a key change at initial configuration, impacting the SensorView Password (nLight Explorer...

SUSE-SU-2021:14800-1 Security update for libcroco

This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions bsc1171685...

OPENSUSE-SU-2021:1276-1 Security update for wireshark

This update for wireshark fixes the following issues: - Update to Wireshark 3.4.7 - CVE-2021-22235: Fixed DNP dissector crash bsc1188375. This update was imported from the SUSE:SLE-15:Update update project...

PT-2021-6974 · Microsoft · Office Powerpoint +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office and Microsoft 365 Apps for...

PT-2021-22872 · Siemens · Teamcenter

Name of the Vulnerable Software and Affected Versions: Teamcenter versions prior to V12.4.0.8 Teamcenter versions prior to V13.0.0.7 Teamcenter versions prior to V13.1.0.5 Teamcenter versions prior to V13.2.0.2 Description: A vulnerability has been identified that could lead to an account takeove...

PT-2021-4687 · Canonical +1 · Apport +2

Name of the Vulnerable Software and Affected Versions: apport versions prior to 2.14.1-0ubuntu3.29+esm8 apport versions prior to 2.20.1-0ubuntu2.30+esm2 apport versions prior to 2.20.9-0ubuntu7.26 apport versions prior to 2.20.11-0ubuntu27.20 apport versions prior to 2.20.11-0ubuntu65.3...

PT-2021-21559 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.0 SP2 Description: A vulnerability has been identified that allows an unauthenticated attacker in the same network to abuse send-to-sleep notifications and cause a Denial-of-Service condition ...

PT-2021-15128 · Netiq · Netiq Access Manager

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 5.0.1 NetIQ Access Manager versions prior to 4.5.4 Description: The issue is related to an information leakage vulnerability. Recommendations: For versions prior to 5.0.1, update to version 5.0.1 or late...

PT-2021-7878 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 93.0.4577.82 Description: The issue is related to a use after free in Blink, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can potentially bypass existing security...

DLA-2753-2 qemu - regression update

Bulletin has no description...

Multiple vulnerabilities in RevoWorks Browser

Overview RevoWorks Browser provided by J's Communication Co., Ltd. is a virtual browser which enables internet isolation. It provides the function that enables access to drives, folders, files, and registries under the isolated environment from the local environment when running the web browser...

CVE-2021-34344

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

PT-2021-16654 · Samsung · Samsungcapture

Name of the Vulnerable Software and Affected Versions: SamsungCapture versions prior to 4.8.02 Description: The issue is related to improper file management, which allows for the leak of sensitive information. Recommendations: For versions prior to 4.8.02, update to version 4.8.02 or later to...

PT-2021-16650 · Unknown · Blockchaintzservice

Name of the Vulnerable Software and Affected Versions: BlockchainTZService versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper access control in the sspExit function within BlockchainTZService, allowing attackers to terminate the service. Recommendations: For...

WordPress core <= 5.8 - Command injection vulnerability in the Lodash library

Command injection vulnerability in the Lodash library in WordPress core versions = 5.8. Version update list: 5.8 updated to 5.8.1, 5.7.2 updated to 5.7.3, 5.7.1 updated to 5.7.3, 5.7 updated to 5.7.3, 5.6.4 updated to 5.6.5, 5.6.3 updated to 5.6.5, 5.6.2 updated to 5.6.5, 5.6.1 updated to 5.6.5,...

Hessian protocol configuration vulnerability in Apache Dubbo

In Apache Dubbo, users may choose to use the Hessian protocol. The Hessian protocol is implemented on top of HTTP and passes the body of a POST request directly to a HessianSkeleton: New HessianSkeleton are created without any configuration of the serialization factory and therefore without...