OPENSUSE-SU-2021:1252-1 Security update for nextcloud

This update for nextcloud fixes the following issues: Update to 20.0.12 Fixed security issues boo1190291: - CVE-2021-32766 CWE-209: Generation of Error Message Containing Sensitive Information - CVE-2021-32800 CWE-306: Missing Authentication for Critical Function - CVE-2021-32801 CWE-532: Inserti...

OPENSUSE-SU-2021:1250-1 Security update for nextcloud

This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo1190291: - CVE-2021-32766 CWE-209: Generation of Error Message Containing Sensitive Information - CVE-2021-32800 CWE-306: Missing Authentication for Critical Function - CVE-2021-32801 CWE-532: Insertion of Sensitive...

PT-2021-4144 · Cisco · Cisco Broadworks Commpilot Application

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the authentication procedure of the Cisco BroadWorks CommPilot Application Software web interface...

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Business Hours Indicator prior t...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1977-1 Rating: important References: 1055117 1065729 1087082 1113295 1133021 1152457 1152472 1152489 1153274 1154353 1155518 1156395 1160634 1164648 1167260 1167574 1167773 1168777 1168838 1169709...

Issues with Storefront Authentication via iFrame on SharePoint - SSO & Username + Password do not work

Authentication works if you connect directly to Storefront but it fails when accessingStorefront via iFrame on Sharepoint, You might encounter these errors when Authenticating: SSO fails with error "Unable to log on with the account that you used to log on to the computer" Manual Username+Passwor...

Gitlab CE/EE Trust Management Issue Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A trust management issue vulnerability exists in Gitlab...

UBUNTU-CVE-2021-22189

Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...

CVE-2021-22189

Technical details about CVE-2021-22189 are not publicly provided in the connected documents. Please monitor for updates from vendors and security advisories for affected GitLab CE/EE versions and remediation guidance.

Gitlab 信任管理问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A trust management issue vulnerability exists in Gitlab...

SUSE-SU-2021:0652-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 bsc1182186, bsc1181239, CVE-2020-27221, CVE-2020-14803 CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characte...

Unable to use TLS/SSL LDAP Auth after ADM upgrade to latest build 13.0-71.40 - TLS Handshake fails with "Unknown CA"

After upgrading ADM to latest build 13.0-71.40 External Authentication fails when LDAP Server is configured using Security type SSL and TLS. When retrieving Attributes on LDAP Server config from ADM GUI throw this error :: "LDAP IP Address or Port Number provided is invalid." Network trace shows...

Smart Doorbell Disaster: Many Brands Vulnerable to Attack

Smart doorbells, designed to allow homeowners to keep an eye on unwanted and wanted visitors, can often cause more security harm than good compared to their analog door bolt alternatives. Consumer-grade digital doorbells are riddled with potential cybersecurity vulnerabilities ranging from...

The vulnerability of JunOS’s EX Series and QFX Series routers allows attackers to elevate their privileges to the root level.

The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...

Bluetooth Spoofing Bug Affects Billions of IoT Devices

A team of academic researchers have discovered a Bluetooth Low Energy BLE vulnerability that allows spoofing attacks that could affect the way humans and machines carry out tasks. It potentially impacts billions of Internet of Things IoT devices, researchers said, and remains unpatched in Android...

Citrix Gateway Native OTP not working with Citrix IOS Workspace Client

1. Native OTP configuration done as per https://docs.citrix.com/en-us/netscaler-gateway/12/native-otp-support.html 2. Android / Windows Workspace Clients and Browser work able to authenticate, enumerate and launch APPs 3. IOS Workspace Client is unable to authenticate, if user enters the...

SUSE-SU-2019:2866-1 Security update for samba

This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902. ...

MGASA-2019-0265 Updated squid packages fix security vulnerabilities

Updated squid packages fix security vulnerabilities: It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service CVE-2019-12525. It was discovered that Squid incorrectly handled...

LenovoEMC Storage Gear Leaks Sensitive Financial Data

Researchers are warning of a vulnerability in LenovoEMC storage hardware and legacy Iomega-branded network attached storage NAS appliances that could lead to a breach of data stored on the devices. The bug, disclosed Tuesday by Lenovo, is rated high-severity and can be triggered via specially...

April 9, 2019—KB4493472 (Monthly Rollup)

None None...