3608 matches found
SUSE-SU-2021:1179-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation bsc1180128...
Monospace Directus Headless CMS File Upload / Rule Bypass Vulnerabilities
======================================================================= title: Arbitrary File Upload and Bypassing .htaccess Rules product: Monospace Directus Headless CMS vulnerable version: v8.8.2 fixed version: v8.8.2, v9 is not affected because of different architecture CVE number:...
TIBCO Security Advisory: March 23, 2021 - TIBCO Enterprise Message Service -2021-28821
TIBCO Enterprise Message Service Windows Platform Installation vulnerability Original release date: March 23,2021 Last revised: CVE-2021-28821 Source: TIBCO Software Inc. Products Affected TIBCO Enterprise Message Service versions 8.5.1 and below TIBCO Enterprise Message Service - Community Editi...
Security Bulletin: Google-api-client as used by IBM QRadar SIEM is vulnerable to authorization bypass (CVE-2020-7692)
Summary Google-api-client as used by IBM QRadar SIEM is vulnerable to authorization bypass, caused by no PKCE support implemented. Vulnerability Details CVEID: CVE-2020-7692 DESCRIPTION: Google APIs google-oauth-java-client could allow a remote attacker to bypass security restrictions, caused by ...
CVE-2021-1698
Windows Win32k Elevation of Privilege Vulnerability...
MGASA-2021-0081 Updated gssproxy package fixes a security vulnerability
gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c CVE-2020-12658...
Fedora 33 : python-pygments (2021-175e686ca6)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-175e686ca6 advisory. - Backport upstream patch to fix CVE 1922137 FEDORA-2021-175e686ca6 Note that Nessus has not tested for this issue but has instead relied only on the...
SUSE-SU-2021:0142-1 Security update for openldap2
This update for openldap2 fixes the following issues: - CVE-2020-25709: Fixed a crash caused by specially crafted network traffic bsc1178909. - CVE-2020-25710: Fixed a crash caused by specially crafted network traffic bsc1178909...
CVE-2020-5686
Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server traditional shipped with IBM Operations Analytics
Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about WebSphere Application Server security vulnerability to sensitive information disclosure CVE-2020-4576 has been published in a security bulletin. Vulnerability...
CVE-2020-36179
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...
AZL-45006 CVE-2020-27841 affecting package openjpeg2 for versions less than 2.3.1-12
There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability...
MGASA-2020-0446 Updated xdg-utils package fixes a security vulnerability
Jens Mueller discovered that xdg-utils incorrectly handled certain URI. An attacker could possibly use this issue to expose sensitive information CVE-2020-27748...
SUSE-SU-2020:3333-1 Security update for gdm
This update for gdm fixes the following issues: - Exit with failure if loading existing users fails bsc1178150 CVE-2020-16125...
CVE-2020-17065
Microsoft Excel Remote Code Execution Vulnerability...
MGASA-2020-0405 Updated fontforge packages fix a security vulnerability
SFDGetFontMetaData insufficient CVE-2020-5395 backport. CVE-2020-25690...
Oracle WebLogic Remote Code Execution (CVE-2020-14882; CVE-2020-14750; CVE-2020-14825; CVE-2020-14883)
A remote code execution vulnerability exists in Oracle WebLogic. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
SUSE-SU-2020:3016-1 Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in downloadhttpurl bsc1176262...
OPENSUSE-SU-2020:1304-1 Security update for inn
This update for inn fixes the following issues: - change file owners in /usr/lib/news to root boo1172573 CVE-2020-8026 This update was imported from the openSUSE:Leap:15.1:Update update project...