292 matches found
Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution
In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarker and Velocity...
SUSE-SU-2022:1724-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2020-27778: Fixed a buffer overflow in pdftohtml bsc1179163. - CVE-2019-14494: Fixed a divide-by-zero error in pdftoppm bsc1143950. - CVE-2019-9959: Fixed an integer overflow in pdftocairo bsc1142465. - CVE-2019-10871: Fixed an invalid...
GHSA-8XQM-3QM5-QHFV Joomla! allows attackers to access cached pages
The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors...
MGASA-2022-0148 Updated openscad packages fix security vulnerability
Out-of-bounds memory access in DXF loader. CVE-2022-0496 Out-of-bounds memory access in comment parser. CVE-2022-0497...
SUSE-SU-2022:1283-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-1016: Fixed a vulnerability in the nftables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be...
SUSE-SU-2022:1256-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount leak bug in net/llc/afllc.c bnc1197391. - CVE-2022-1016: Fixed a vulnerability in the nftables component of the netfilter...
PVS Login error: Error "the domain\user does not have access to the farm" or "The specified AuthGroup does not exist" when Trying to Connect to PVS Farm
When trying to connect to a PVS Farm through the PVS Console, the following error is displayed and you cannot connect to the Farm. Error : "the domain\user does not have access to the farm" Error : "The specified AuthGroup does not exist"...
OPENSUSE-SU-2022:0030-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 98.0.4758.80 boo1195420 CVE-2022-0452: Use after free in Safe Browsing CVE-2022-0453: Use after free in Reader Mode CVE-2022-0454: Heap buffer overflow in ANGLE CVE-2022-0455: Inappropriate implementation in Full Screen Mode...
SUSE-SU-2022:0334-1 Security update for containerd, docker
This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files bsc1191015. - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby bsc1191434. - CVE-2021-41092: Fixed exposed user credentials with a misconfigured...
CVE-2021-26336
CVE-2021-26336 concerns AMD System Management Unit (SMU) with insufficient bounds checking that can cause invalid memory accesses/updates, leading to an SMU hang and the system may fail to service further requests from other components. Multiple sources confirm the issue under the SMU and referen...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
PT-2021-7321 · Oracle +11 · Mysql Server +10
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.35 and prior MySQL Server versions 8.0.26 and prior Description: The issue is related to insufficient input validation in the InnoDB component. It allows a high-privileged attacker with network access via multiple...
Citrix PVS vDisk is caching on server even though it is configured to cache to the machine
Scenario: PVS target devices streaming a new version of a vDisk are caching to the server instead of to the cache drive on the target device. Target devices streaming the original version of the vDisk work correctly. Attempts to create or edit a file on the write cache are denied. Inspecting the...
OPENSUSE-SU-2021:1303-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 93.0.4577.63 boo1190096: CVE-2021-30606: Use after free in Blink CVE-2021-30607: Use after free in Permissions CVE-2021-30608: Use after free in Web Share CVE-2021-30609: Use after free in Sign-In CVE-2021-30610: Use after free in...
MGASA-2021-0293 Updated tor package fixes security vulnerabilities
Don't allow relays to spoof RELAYEND or RELAYRESOLVED cell on half-closed streams. Previously, clients failed to validate which hop sent these cells: this would allow a relay on a circuit to end a stream that wasn't actually built with it CVE-2021-34548. hashtable-based CPU denial-of-service atta...
OPENSUSE-SU-2021:0629-1 Security update for Chromium
This update for chromium fixes the following issues: - Chromium was updated to 90.0.4430.93 boo1184764,boo1185047,boo1185398 CVE-2021-21227: Insufficient data validation in V8. CVE-2021-21232: Use after free in Dev Tools. CVE-2021-21233: Heap buffer overflow in ANGLE. CVE-2021-21228: Insufficient...
openSUSE: Security Advisory for wavpack (openSUSE-SU-2021:0154-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
MGASA-2021-0187 Updated gstreamer1.0 packages fix security vulnerabilities
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files SA-2021-0002. GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files SA-2021-0003. GStreamer before 1.18.4 might do an...
MGASA-2021-0190 Updated x11-server packages fix security vulnerability
Insufficient checks on the lengths of the XInput extension ChangeFeedbackControl request can lead to out of bounds memory accesses in the X server. These issues can lead to privilege escalation for authorized clients on systems where the X server is running privileged CVE-2021-3472...