5916 matches found
[SECURITY] Fedora 33 Update: nextcloud-client-3.1.3-1.fc33
Nextcloud-client enables you to connect to your private Nextcloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your Nextcloud server. Simply copy a file into the directory and the Nextcloud Client does the rest...
Nextcloud: Trusted server shared secret stored unencrypted in the database
The attack vector here is that somebody gets their hands on your database. When two servers have added each other as trusted server they exchange shared secret token. With this token they can sync down each other user lists. However it seems that this token is stored in plain text in the...
PT-2024-11070
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between a task aborting a transaction during a commit, a task doing an fsync, and the transaction kthread, leading to a use-after-free of the log root tree. This...
openSUSE: Security Advisory for cobbler (openSUSE-SU-2021:0046-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)
Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)
Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)
Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...
RUSTSEC-2021-0113 AtomicBucket<T> unconditionally implements Send/Sync
In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...
AtomicBucket<T> unconditionally implements Send/Sync
In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...
PT-2021-7757 · Red Hat +6 · 389 Directory Server +7
Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions affected versions not specified Description: The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in...
March 29, 2021—KB5000842 (OS Builds 19041.906 and 19042.906) Preview
None None...
Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)
Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)
Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)
Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
CVE-2021-28147: Undefined Security Weakness
The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated...
CVE-2021-28146: Incorrect Authorization
The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team...
@eik/core (>=1.0.0-alpha.19, <=1.2.6), @eik/service (>=1.0.0-alpha.13, <=1.2.32) +2 more potentially affected by CVE-2021-27290 via ssri (8.0.0)
ssri NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ssri and may be impacted: - @eik/core =1.0.0-alpha.19, =1.0.0-alpha.13, =26.4.0, =2.4.7, =2.5.4 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...
byte-common (1.0.0), registry-sync (>=2.4.1, <=2.4.6) potentially affected by CVE-2021-27290 via ssri (>=7.0.0, <=7.1.0)
ssri NPM version =7.0.0, =2.4.1, =2.4.6 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...
Unspecified Vulnerability in Rust (CNVD-2021-17257)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in internment crate before 0.4.2 for Rust, which stems from an unconditional implementation of Sync that results in memory-corrupted data contention. No detailed vulnerability...