12583 matches found
UVI-2021-1001220 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.3 by commit...
PT-2021-4651 · Elastic · Enterprise Search App Search
Name of the Vulnerable Software and Affected Versions: Elastic Enterprise Search App Search versions prior to 7.14.0 Description: The issue is related to missing authorization for API keys via an alternate route. An authenticated attacker could exploit this to utilize API keys belonging to higher...
The vulnerability of the software for updating Schneider Electric Software Update (SESU) lies in the possibility of restoring unreliable data in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the software for updating Schneider Electric Software Update SESU involves the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerabilities fixed in Sophos UTM Up2Date
Sophos has fixed multiple vulnerabilities in Up2Date for Sophos UTM. A malicious party could potentially abuse it to cause a Denial-of-Service or to perform a execute a Cross-Site Scripting XSS attack. Such an attack can result in the execution of arbitrary script code in the browser used to visi...
SUSE-SU-2021:2559-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-5910 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. bsc1188062 - CVE-2021-22555: Fixed an heap out-of-bounds write in...
OPENSUSE-SU-2021:1863-1 Security update for umoci
This update for umoci fixes the following issues: Update to v0.4.7 bsc1184147. - CVE-2021-29136: Fixed overwriting of host files via malicious layer bsc1184147...
Vulnerable version of Underscore.js used - CVE-2021-23358
Affected versions of Atlassian Jira Server and Data Center used Underscore.js 1.9.1, which was vulnerable to CVE-2021-23358|https://vulners.com/cve/CVE-2021-23358. The affected versions of Atlassian Jira Server and Data Center are before version 8.18.0. Affected versions: version 8.13.10 8.14.0 =...
MGASA-2021-0368 Updated lib3mf packages fix security vulnerability
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability CVE-2021-21772. A new package 'act' is...
CVE-2020-7388
CVE-2020-7388 affects Sage X3 AdxAdmin/AdxDSrv.exe, allowing unauthenticated RCE as SYSTEM by editing the client authentication request. The flaw bypasses credential validation; attacker may need to know the installation path (information learnable via CVE-2020-7387). Root cause involves the logi...
OPENSUSE-SU-2021:2454-1 Security update for transfig
This update for transfig fixes the following issues: Update to version 3.2.8, including fixes for - CVE-2021-3561: overflow in fig2dev/read.c in function readcolordef bsc1186329. - CVE-2019-19797: out-of-bounds write in readcolordef in read.c bsc1159293. - CVE-2019-19555: stack-based buffer...
Cisco Unified Customer Voice Portal Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal CVP could allow an unauthenticated, remote attacker to perform a cross-site scripting XSS attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by t...
Minecraft Java Edition vulnerable to directory traversal
Overview Minecraft Java Edition provided by Mojang Studios contains a directory traversal vulnerability CWE-22. RyotaK reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the...
PT-2021-14870 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions 7.10.0 through 7.13.3 Description: A memory disclosure issue was identified in error reporting, allowing a user who can submit arbitrary queries to potentially retrieve sensitive information, including Elasticsearch...
DLA-2712-1 libjdom1-java - security update
Bulletin has no description...
Security Bulletin: NVIDIA GPU Display Drivers - July 2021
NVIDIA has released a software security update for NVIDIA GPU Display Drivers. This update addresses issues that may lead to information disclosure, data tampering, and denial of service. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or...
JVN#86026700: Multiple vulnerabilities in GroupSession
GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. Cross-site scripting vulnerability CWE-79 - CVE-2021-20785 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
MGASA-2021-0352 Updated aom packages fix security vulnerabilities
aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap CVE-2021-30473. aomdsp/graintable.c in libaom in AOMedia before 2021-03-30 has a use-after-free CVE-2021-30474. aomdsp/noisemodel.c in libaom in AOMedia before 2021-03-24 has a buffer overflow...
DLA-2709-1 firefox-esr - security update
Bulletin has no description...
Vulnerabilities fixed in Adobe Bridge
Adobe has fixed vulnerabilities in Bridge. A malicious person could potentially exploit the vulnerabilities to execute arbitrary code under a user's privileges or to gain access to files on the vulnerable system. Adobe has released updates to fix the vulnerabilities in Bridge 11.1. For more...