Hitachi Application Server Help vulnerable cross-site scripting

Overview Hitachi Application Server Help contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrar...

JVN#03776901: Hitachi Application Server Help vulnerable cross-site scripting

Hitachi Application Server Help contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the appropriate latest version of the help according to the information provided by the developer. Product...

PT-2021-12729 · Citrix · Citrix Netscaler Gateway +1

Name of the Vulnerable Software and Affected Versions: Citrix ADC and Citrix/NetScaler Gateway versions prior to 13.0-82.41 Citrix ADC and Citrix/NetScaler Gateway versions prior to 12.1-62.23 Citrix ADC and Citrix/NetScaler Gateway versions prior to 11.1-65.20 Citrix ADC 12.1-FIPS versions prior...

PT-2021-17936 · Qnap Systems · Qnap Helpdesk +1

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.4 Description: An improper access control issue has been reported, affecting QNAP NAS. This issue allows remote attackers to compromise the security of the software. Recommendations: For versio...

PT-2021-17929 · Qnap Systems · Qsw-M408 +3

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2S QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C QNAP Syste...

PT-2021-16578 · Unknown · Libsflacextractor

Name of the Vulnerable Software and Affected Versions: libsflacextractor library prior to SMR MAY-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the sflacfd get frm function. This vulnerability allows attackers to execute arbitrary code on the...

SUSE-SU-2021:1952-1 Security update for csync2

This update for csync2 fixes the following issues: - CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS bsc1147137 - CVE-2019-15523: Fixed an incorrect TLS handshake error handling bsc1147139...

DLA-2684-1 lasso - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2014:1178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0231 Updated dnsmasq packages fix a security vulnerability

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ...

CVE-2021-22549

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c...

CVE-2021-22548

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

Design/Logic Flaw

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

urllib3 vulnerable to Regular expression Denial-of-Service (ReDoS)

Overview urllib3 contains a Regular expression Denial-of-Service DoS vulnerability. urllib3, an HTTP client module for Python, contains a Regular expression Denial-of-Service ReDoS vulnerability CWE-400, CVE-2021-33503 due to catastrophic backtracking while processing a malicious URL. Nariyoshi...

Intel® PROSet/Wireless WiFi Driver June 2021 Security Update

Intel has informed HP of a potential security vulnerability identified in the Intel® PROSet/Wireless WiFi drivers which may allow information disclosure and denial of service. Intel is releasing a software update to mitigate this potential vulnerability. Intel has released updates to mitigate the...

Intel® Rapid Storage Technology Advisory

Summary: A potential security vulnerability in the Intel® Rapid Storage Technology software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0104 Description: Uncontrolled search path element in...

Intel® Processor Diagnostics Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostics Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8702 Description: Uncontrolled search path element in the...

Intel® ProSet/Wireless WiFi Driver Advisory

Summary: A potential security vulnerability in some Intel® ProSet/Wireless WiFi drivers may allow information disclosure and denial of service. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0105 Description: Insecure inherite...

Mozilla: Thunderbird stored OpenPGP secret keys without master password protection

OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those keys. Version 78.10.2 will restore the protection mechanism for newly imported keys, and will...