libhugetlbfs bug fix and enhancement update

An update is available for libhugetlbfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

abrt bug fix and enhancement update

An update is available for gnome-abrt, abrt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

CVE-2020-9861

creationtimestamp| type| source ---|---|--- 2020-11-03 02:39:10+00:00| seen| https://t.me/cibsecurity/15794...

mingw-expat security update

An update for mingw-expat is now available for Rocky Linux 8. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-5934

creationtimestamp| type| source ---|---|--- 2020-11-01 13:37:37+00:00| seen| https://t.me/cibsecurity/15754...

CVE-2020-27986

creationtimestamp| type| source ---|---|--- 2020-10-29 01:33:09+00:00| seen| https://t.me/cibsecurity/15703 2021-05-10 02:45:38+00:00| seen| https://t.me/pwnwikizhchannel/394 2024-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-12 2024-11-17...

Pulse Secure Pulse Connect Secure Cross-Site Scripting Vulnerability (CNVD-2020-60094)

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. A cross-site scripting vulnerability exists in Pulse Connect Secure versions prior to 9.1R9, which stems from a vulnerability in the web...

httpd: allow connecting via SSL to a backend worker when the backend keystore file's ID is 'unknown'

A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from...

USN-4608-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate authority bundle...

@agneta/cli (>=0.14.7, <=0.14.15), @servisbot/servisbot-cli (>=9.4.0, <=10.3.2) +3 more potentially affected by CVE-2020-7774 via y18n (4.0.0)

y18n NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on y18n and may be impacted: - @agneta/cli =0.14.7, =9.4.0, =0.14.4, =1.0.0-rc.1, =1.0.0-rc.7 Source cves: CVE-2020-7774 Source advisory: SNYK:JS-Y18N-1021887...

Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity

Summary The Cybersecurity and Infrastructure Security Agency CISA has consistently observed Chinese Ministry of State Security MSS-affiliated cyber threat actors using publicly available information sources and common, well-known tactics, techniques, and procedures TTPs to target U.S. Government...

CVE-2020-25483

creationtimestamp| type| source ---|---|--- 2020-10-23 22:54:02+00:00| seen| https://t.me/cibsecurity/15561...

[SECURITY] Fedora 33 Update: kpmcore-4.2.0-1.fc33

KPMcore contains common code for managing partitions by KDE Partition Manag er and other KDE projects...

Authorization Bypass

postgresql is vulnerable to authroization bypass. The selectivity estimators allows an attacker to bypass row security policies and view common values of certain columns...

CVE-2020-3410

A vulnerability in the Common Access Card CAC authentication feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and access the FMC system. The attacker must have a valid CAC to initiate the access attempt. The...

Authentication flaw

A vulnerability in the Common Access Card CAC authentication feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and access the FMC system. The attacker must have a valid CAC to initiate the access attempt. The...

CVE-2020-3410

CVE-2020-3410 affects Cisco Firepower Management Center (FMC) Software CAC authentication: vulnerability in session invalidation that allows an unauthenticated, remote attacker with a valid CAC to bypass authentication and access FMC with the privileges of a CAC-authenticated user currently logge...

Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability

A vulnerability in the Common Access Card CAC authentication feature of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and access the FMC system. The attacker must have a valid CAC to initiate the access attempt. The...

postgresql: Selectivity estimators bypass row security policies

PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...

PT-2020-4465 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: A vulnerability in the Common Access Card CAC authentication feature could allow an unauthenticated, remote attacker to bypass authentication and acce...