GHSA-FVRF-9428-527M Backport for CVE-2021-21024 Blind SQLi from Magento 2

Impact This vulnerability allows an administrator unauthorized access to restricted resources. We fixed a vulnerability in the MySQL adapter to prevent SQL injection attacks. This is a backport of CVE-2021-21024 https://helpx.adobe.com/security/products/magento/apsb21-08.html. Patches Has the...

Backport for CVE-2021-21024 Blind SQLi from Magento 2

Impact This vulnerability allows an administrator unauthorized access to restricted resources. We fixed a vulnerability in the MySQL adapter to prevent SQL injection attacks. This is a backport of CVE-2021-21024 https://helpx.adobe.com/security/products/magento/apsb21-08.html. Patches Has the...

SUSE: Security Advisory (SUSE-SU-2018:3912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EIPStackGroup OpENer EtherNet/IP Denial of Service Vulnerability

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stacking capabilities to IO adapter devices .A security vulnerability exists in EIPStackGroup OpENer Ethernet/IP that can be exploited by attackers to send specially crafted packets that could result ...

The vulnerability of the `HttpUtils#getURLConnection` method in the Apache Calcite dynamic data management framework allows a attacker to execute a “man-in-the-middle” attack or gain unauthorized access to protected information.

The vulnerability of the HttpUtilsgetURLConnection method in the Apache Calcite dynamic data management framework is related to the absence of authentication procedures. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middle” attack or gain unauthorized access to...

Fedora 32 : 1:rubygem-activerecord (2021-def0e32233)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-def0e32233 advisory. - The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service REDoS vulnerability...

M-System Giken Co M-System DL8 安全漏洞

M-System Giken Co The M-System DL8 is an Ethernet adapter from Japan M-System Giken Co. Provides types designed to connect DL8 and R8 series modules. A security vulnerability exists in the M-System Giken Co M-System DL8 that can be exploited by an unauthorized attacker to perform a DoS attack...

M-System Giken Co M-System DL8 安全漏洞

M-System Giken Co The M-System DL8 is an Ethernet adapter from Japan M-System Giken Co. Provides types designed to connect DL8 and R8 series modules. A security vulnerability exists in the M-System Giken Co M-System DL8, which can be exploited by an unauthorized attacker to perform an operation...

Token Verification Bug

Overview Impact next-auth implementations using the Prisma database adapter with the Email provider are impacted. Implementations using the Prisma database adapter that are not using the Email provider are not impacted. Implementations using the default database adapter TypeORM with the Email...

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to cause a service failure.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24502

Improper input validation in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows, may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...

UBUNTU-CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

UBUNTU-CVE-2020-24502

Improper input validation in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows, may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24502

CVE-2020-24502: Affects Intel Ethernet E810 Adapter drivers (Linux prior to 1.0.4; Windows prior to 1.0.4/1.4.29.0). Improper input validation could allow an authenticated local user to cause a denial of service. The MiracleLinux AXSA-2021-2785 advisory confirms the issue alongside other CVEs in ...

CVE-2020-24502

Improper input validation in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before version 1.4.29.0 for Windows, may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2020-24504

Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...