CVE-2021-36925

CVE-2021-36925 details (normal mode) Realtek RtsUpx.sys, the USB Utility Driver for Camera/Hub/Audio, up to version 1.14.0.0 is affected. The vulnerability allows local, low-privileged users to perform arbitrary reads/writes in physical memory via a crafted IOCTL to the device, leading to potenti...

CVE-2021-36923

Summary: CVE-2021-36923 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) up to version 1.14.0.0. The root cause is an access-control/IOCTL handling flaw that permits local, low-privileged users to access privileged USB IN/OUT operations. This can enable escalation of privileges, den...

CVE-2021-36922

CVE-2021-36922 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) for Camera/Hub/Audio up to version 1.14.0.0. The root cause is failure to perform privilege checks on device IO control packets, enabling local, low-privilege users to gain unauthorized access to USB devices. Impact inc...

openscap bug fix and enhancement update

An update is available for openscap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenSCAP suite enables integration of the Security Content Automation...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Realtek RtsUpx Usb Utility Driver 访问控制错误漏洞

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which originates when the product allows arbitrary reads and writes from physical memory via a...

Realtek RtsUpx USB Utility Driver 访问控制错误漏洞

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor Realtek, China. An Access Control Error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's failure to perform privilege checks on the device's IO...

CentOS 8 : java-1.8.0-openjdk (CESA-2021:3893)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3893 advisory. - OpenJDK: Weak ciphers preferred over stronger ones for TLS JSSE, 8264210 CVE-2021-35550 - OpenJDK: Excessive memory allocation in RTFParser Swing,...

Backdoor.Win32.Antilam.14.o Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/2914f01e65d848655d4f1aac51ff04d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Antilam.14.o Vulnerability: Unauthenticated Remote Command Execution Description: The...

CentOS 8 : java-11-openjdk (CESA-2021:3891)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3891 advisory. - OpenJDK: Weak ciphers preferred over stronger ones for TLS JSSE, 8264210 CVE-2021-35550 - OpenJDK: Excessive memory allocation in RTFParser Swing,...

The vulnerability of the dbus utility in the “Avrora” operating system allows a hacker to trigger the racing mode and perform a service denial.

The vulnerability of the dbus utility in the “Avrora” operating system is related to the simultaneous, numerous accesses by an application to the hardware components. Exploiting this vulnerability allows a perpetrator to trigger a race condition and cause a service failure by running multiple...

XSS in the `of` option of the `.position()` util in jquery-ui

Impact Accepting the value of the of option of the .position util from untrusted sources may execute untrusted code. For example, invoking the following code: js $ "element" .position my: "left top", at: "right bottom", of: "", collision: "none" ; will call the doEvilThing function. Patches The...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Installation Manager and IBM Packaging Utility (CVE-2016-5597)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Versions 6 and 7 used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in October 2016. Vulnerability Details CVEID: CVE-2016-5597 DESCRIPTION: An unspecified...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 6 and 7 used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in January 2017. Vulnerability Details CVEID: CVE-2016-5547 DESCRIPTION: An...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in July 2017. Vulnerability Details CVEID: CVE-2017-10116 DESCRIPTION: An unspecified...

Security Bulletin: Vulnerability in SSLv3 affects IBM Packaging Utility (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM Packaging Utility Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follo...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect the IBM Installation Manager and IBM Packaging Utility (CVE-2015-2625 and CVE-2015-1931 )

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in July 2015. Vulnerability Details CVEID: CVE-2015-2625 DESCRIPTION...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects the IBM Installation Manager and IBM Packaging Utility (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects the IBM Installation Manager and IBM Packaging Utility. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information,...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the IBM Installation Manager and IBM Packaging Utility (CVE-2014-6593 and CVE-2015-0138)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 that are used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in January 2015. This bulletin also addresses the...

Security Bulletin: Vulnerability in RC4 stream cipher affects the IBM Installation Manager and IBM Packaging Utility (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects the IBM Installation Manager and IBM Packaging Utility Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. A...