openSUSE 15 Security Update : php7 (openSUSE-SU-2021:2637-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2637-1 advisory. - Tenable.sc leverages third-party software to help provide underlying functionality. Multiple third-party components were found to contain...

NVIDIA Bootloader 缓冲区错误漏洞

NVIDIA Bootloader is a bootloader component from Nvidia Corporation. NVIDIA Bootloader is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause information disclosure, data integrity, and information disclosure restrictions across all components...

Spotting brand impersonation with Swin transformers and Siamese neural networks

Every day, Microsoft Defender for Office 365 encounters millions of brand impersonation emails. Our security solutions use multiple detection and prevention techniques to help users avoid divulging sensitive information to phishers as attackers continue refining their impersonation tricks. In thi...

Spotting brand impersonation with Swin transformers and Siamese neural networks

Every day, Microsoft Defender for Office 365 encounters millions of brand impersonation emails. Our security solutions use multiple detection and prevention techniques to help users avoid divulging sensitive information to phishers as attackers continue refining their impersonation tricks. In thi...

多款Qualcomm产品授权问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. An authorization issue vulnerability exists in various...

Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2021-25215 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries fo...

[SECURITY] Fedora 34 Update: php-pear-1.10.12-9.fc34

PEAR is a framework and distribution system for reusable PHP components. This package contains the basic PEAR components...

[SECURITY] Fedora 33 Update: php-pear-1.10.12-9.fc33

PEAR is a framework and distribution system for reusable PHP components. This package contains the basic PEAR components...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, and the micro-programming software for Schneider Electric’s Modicon M340 and Modicon M580 models. This vulnerability exists due to the failure to take measures to neutralize certain special elements, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the programming software for PLCs programmable logic controllers, namely EcoStruxure Control Expert, and the microsoftware for Schneider Electric Modicon M340 programmable logic controllers, exists due to the lack of measures to neutralize certain components. Exploiting this...

Error:"resource already exists" When Installing a Certificate on NetScaler Appliance

When you install a certificate on the NetScaler appliance, the following error message appears: "resource already exists" Background When you create certificates, each certificate must have a unique serial number. Additionally, the certificate has the following components that help identify a...

Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2020-8908 DESCRIPTION: Guava could allow a remote authenticated attacker to bypass security restrictions, caused by a temp...

Authentication flaw

An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication...

CVE-2021-2455

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Design/Logic Flaw

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-2455

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2021-2455

CVE-2021-2455 affects Oracle PeopleSoft Enterprise HCM Shared Components (component: Person Search) on version 9.2. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the shared components, potentially enabling unauthorized creation, deletion, or modific...

Oracle PeopleSoft Enterprise HCM Global Payroll 安全漏洞

Oracle PeopleSoft Enterprise HCM Global Payroll is a rules-based payroll calculation solution from Oracle Corporation Oracle. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise HCM Shared Components product Component:Person Search that allows a highly privileged attacker...

Oracle Critical Patch Update Advisory - July 2021

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third-party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches add...

Unauthorized Access Vulnerability in WV-SFN310A at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SFN310A, which can be exploited...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Denial-of-Service Circumvention of security measure Executing arbitrary code Accessing...