gnome-session bug fix and enhancement update

The gnome-session package manages the GNOME desktop session. It starts up other core components of GNOME and handles logouts and saving of the sessions. Bug Fixes and Enhancements: gnome-session kiosk-session support still isn't up to muster BZ1959505...

gnome-session bug fix and enhancement update

An update is available for gnome-session. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-session package manages the GNOME desktop session. It starts ...

Race condition

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnerability affects Firefox 88.0.1 and Firefox for Android 88.1.3...

CVE-2021-29952

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnerability affects Firefox 88.0.1 and Firefox for Android 88.1.3...

CVE-2021-29952

When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnerability affects Firefox 88.0.1 and Firefox for Android 88.1.3...

Unauthorized Access Vulnerability in Panasonic Corporation (China) WV-SC384

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SC384, which can be exploited b...

[SECURITY] Fedora 33 Update: dogtag-pki-10.10.6-1.fc33

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. PKI consists of the following components: Automatic Certificate Management Environment ACME Responder Certificate Authority CA Key Recovery Authority KRA Online Certificate Status...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2021-23392 via locutus (>=2.0.10, <=2.0.14)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2021-23392 Source advisory: OSV:GHSA-39Q4-P535-C852...

SUSE SLES11 Security Update : jasper (SUSE-SU-2021:14627-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14627-1 advisory. - There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary...

CVE-2020-11161

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Design/Logic Flaw

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2020-11161

Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Unauthorized Access Vulnerability in WV-SPW611L at Panasonic (China) Co.

Panasonic China Co., Ltd. was established in 1994 and is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW611L, which can be...

The vulnerability of the component set used for building JBoss Core Services’ corporate applications relates to the use of memory after it is freed. This allows a attacker to execute arbitrary code.

The vulnerability of the component set used to build JBoss Core Services applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

Unauthorized Access Vulnerability in WV-SW355 at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in WV-SW355 of Panasonic China Co. An attack...

Intel Processors 信息泄露漏洞

Intel Processors is an American Intel company that provides the ability to interpret computer instructions and process data in computer software. An information disclosure vulnerability exists in Intel Processors, which arises from errors such as configuration during operation of a networked syst...

Microsoft Windows Print Spooler Components 安全漏洞

Windows Print Spooler is a printer background handler for Windows. An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler. An attacker can exploit this vulnerability to elevate privileges...

@tiendanube/components (>=0.0.2, <=2.4.2), @tiendanube/icons (>=0.1.1, <=0.2.8) +2 more potentially affected by CVE-2021-33623 via trim-newlines (3.0.0)

trim-newlines NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on trim-newlines and may be impacted: - @tiendanube/components =0.0.2, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...

CVE-2021-31249

A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...

多款Chiyu产品注入漏洞

The Chiyu CHIYU BF-430, etc. are all networking servers that provide communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu Inc. of Taiwan, China. A security vulnerability exists in CHIYU Technology Inc's BF-430, BF-431, and BF-450M TCP/IP...