[SECURITY] Fedora 32 Update: ruby-2.7.3-136.fc32

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 33 Update: ruby-2.7.3-136.fc33

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

CVE-2021-26943

The UX360CA BIOS through 303 on ASUS laptops allow an attacker with the ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM issue 3 of 3...

Asus UX360CA BIOS through 303 安全漏洞

The Asus UX360CA BIOS through 303 is a laptop from Asus Japan. The UX360CA BIOS through 303 on ASUS contains a security vulnerability that can be exploited by an attacker to overwrite almost any physical memory location and execute arbitrary code in the SMM...

Weak Password Vulnerability in H3C M60 System Management

The H3C M60 is a router from Xinhua San Technology Co. A weak password vulnerability exists in the H3C M60 system management, which can be exploited by an attacker to obtain sensitive information...

Weak Password Vulnerability in H3C ER3100G2 System Management

The H3C ER3100G2 is a next-generation enterprise-class Gigabit router. A weak password vulnerability exists in the H3C ER3100G2 system management. An attacker exploits this vulnerability to log into the system backend and obtain sensitive information...

Weak Password Vulnerability in H3C ER5100G2 System Management

The ER5100G2 is a next-generation enterprise-class Gigabit wired router. A weak password vulnerability exists in the H3C ER5100G2 system management, which can be exploited by an attacker to log into the system backend and obtain sensitive information...

Weak Password Vulnerability in H3C ER3108GW System Management

ER3108GW is a new generation of enterprise-class wireless high-performance router launched by Hangzhou Huasan Communication Technology Co. A weak password vulnerability exists in the H3C ER3108GW system management, which can be exploited by an attacker to log into the system backend and obtain...

Weak Password Vulnerability in H3C ER2100 System Management

H3C ER2100 is a high-performance broadband router for small and medium-sized enterprises SMEs launched by Xinhua San Technologies Co. A weak password vulnerability exists in the system management of H3C ER2100, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in ER3260G2 system administration (CNVD-2021-22501)

ER3260G2 is a new generation of enterprise-grade Gigabit high-performance router from Xinhua San Technologies Co. A weak password vulnerability exists in the system management of ER3260G2, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in H3C ER8300G2 System Management

The H3C ER8300G2 is a new generation of enterprise-class Gigabit high-performance router from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C ER8300G2 system management, which can be exploited by an attacker to obtain sensitive information...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Heap buffer overflow in argument parsin...

Dell Inspiron 5675 BIOS Access Control Error Vulnerability

The Dell Inspiron 5675 BIOS is a Dell USA program that provides basic inputs and outputs for the device, a self-test after powering on the device, and system self-boot functionality. A security vulnerability exists in the Dell Inspiron 5675 BIOS versions prior to version 1.4.1, which can be...

CVE-2021-36342

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2020-26186

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-26186

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode SMM...