Oracle MySQL Enterprise Monitor Multiple Vulnerabilities (Apr 2021 CPU)

MySQL Enterprise Monitor installed on the remote host is 8.0.x prior to 8.0.24. Therefore, it's affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General Apache Tomcat...

CVE-2021-2157

creationtimestamp| type| source ---|---|--- 2021-04-24 12:48:05+00:00| published-proof-of-concept| https://t.me/reconshell/690...

Threat Roundup for April 16 to April 23

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 16 and April 23. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral... This is on...

Oracle NoSQL Database Multiple Vulnerabilities (Apr 2021 CPU)

The version of Oracle NoSQL Database Enterprise running on the remote host is prior to 20.3.17. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in Oracle NoSQL Database component: Administration Node.js. The supported version th...

Oracle E-Business Suite Multiple Vulnerabilities (April 2021 CPU)

The version of Oracle E-Business Suite installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - A vulnerability exists in the Oracle Applications Framework product of Oracle E-Business Suite component: Home page. The supported version th...

Oracle HTTP Server (Apr 2021 CPU)

The 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 versions of HTTP Server installed on the remote host are affected by a vulnerability as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-In product of Oracle Fusion Middleware component: SSL Module Dell...

CVE-2021-25679

creationtimestamp| type| source ---|---|--- 2021-04-22 03:58:24+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/231...

Unspecified Vulnerability in Samsung SMR (CNVD-2021-30497)

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to SMR APR-2021 Release 1 that stems from faulty access control allowing untrusted applications to access a running process to...

Oracle Primavera Gateway (Apr 2021 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote host is 16.2.x, 17.12.x prior to 17.12.11. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in the Primavera Gateway...

Oracle Application Testing Suite (Apr 2021 CPU)

The 13.3.0.1 versions of Application Testing Suite installed on the remote host are affected by a vulnerability as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps OpenCV. T...

MySQL 8.0.x < 8.0.24 Multiple Vulnerabilities (Apr 2021 CPU)

The version of MySQL running on the remote host is 8.0.x prior to 8.0.24. It is, therefore, affected by multiple vulnerabilities, including the following, as noted in the April 2021 Critical Patch Update advisory: - Vulnerability in the MySQL Server product of Oracle MySQL component: Server:...

Oracle WebLogic Server Multiple Vulnerabilities (Apr 2021 CPU)

The version of WebLogic Server installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - An unspecified vulnerability exists in the Coherence Container component. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Oracle VM VirtualBox (April 2021 CPU)

The version of Virtualbox installed on the remote host is prior to 6.1.20. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that ...

Oracle Releases April 2021 Critical Patch Update

Oracle has released its Critical Patch Update for April 2021 to address 384 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Oracle April 2021...

KLA12160 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...

Security Bulletin: NVIDIA GPU Display Driver - April 2021

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, and information disclosure. To protect your system, download and install this software update through the NVIDIA...

CVE-2021-20291

creationtimestamp| type| source ---|---|--- 2021-04-18 14:31:16+00:00| seen| https://t.me/CyberSecurityTechnologies/3154 2022-01-03 08:26:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3162 2026-08-29 18:00:04+00:00| published-proof-of-concept|...

Security Updates for Microsoft SharePoint Server 2019 (Aprtil 2021)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Denial of Service Update CVE-2021-28450 - Microsoft Word Remote Code Execution Vulnerability CVE-2021-28453 C Tenable...

Microsoft Edge (Chromium) < 90.0.818.39 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 90.0.818.39. It is, therefore, affected by multiple vulnerabilities as referenced in the April 15, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Security Updates for Microsoft Sharepoint 2016 (April 2021)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Denial of Service Update CVE-2021-28450 - Microsoft Word Remote Code Execution Vulnerability CVE-2021-28453 C Tenable...