3309 matches found
The vulnerability of the VMware Tools driver for the VM3DMP set of utilities on Windows operating systems allows a hacker to cause a service failure.
The vulnerability of the VMware Tools utility driver for Windows operating systems exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
[SECURITY] Fedora 33 Update: pdfbox-2.0.24-1.fc33
Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...
CVE-2021-25652 Avaya Aura Appliance Virtualization Platform Utilities Sensitive Information Disclosure Vulnerability
An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities AVPU. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be...
CVE-2021-25652
CVE-2021-25652 affects Avaya Aura Appliance Virtualization Platform Utilities (AVPU). The vulnerability is an information-disclosure issue in the directory and file management that could allow any local user to access system functionality and configuration information intended for privileged user...
Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞
Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides features for the AVP platform, such as AVP alert and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in Avaya Aura Appliance Virtualizatio...
Avaya Aura Appliance Virtualization Platform Utilities (AVPU) 安全漏洞
Avaya Aura AVPU is an application virtualization platform utility from Avaya, USA. It provides functionality for the AVP platform, such as AVP alarm and log collection, dual-stack support, service access, and out-of-band management. A security vulnerability exists in the Avaya Aura Appliance...
CVE-2021-33531
In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...
OESA-2021-1228 xdg-utils security update
The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop, such as Linux. The following tools are included in xdg-utils: xdg-desktop-menu Install desktop menu items xdg-desktop-icon Install icons to the desktop xdg-icon-resource Install...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20517)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-29754)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
CVE-2021-32550
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users...
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which originates from a SEGV in mainprintunhandledexception in the main-utils.c file.No detailed vulnerability details are available at this time...
DEBIAN-CVE-2020-27748
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...
Watering Hole Attack Was Used to Target Florida Water Utilities
An investigation undertaken in the aftermath of the Oldsmar water plant hack earlier this year has revealed that an infrastructure contractor in the U.S. state of Florida hosted malicious code on its website in what's known as a watering hole attack. "This malicious code seemingly targeted water...
ghostscript security, bug fix, and enhancement update
An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153 and CVE-2011-1498)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
Microsoft Patch Tuesday – May 2021 Microsoft patched 55 CVEs in their May 2021 Patch Tuesday release, of which 4 are rated as critical severity. Three 0-day vulnerability patches were included in the release. As of this publication date, none have been exploited. Qualys released 12 QIDs on the sa...
CVE-2021-31200
Common Utilities Remote Code Execution Vulnerability...
