OPENSUSE-SU-2021:2202-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26558: Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 may permit a nearby man-in-the-middle attacker to identify the...

Google Chrome iFrameSandbox Permission License and Access Control Issues Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A privilege permission and access control issue vulnerability exists in versions prior to Google Chrome iFrameSandbox 91.0.4472.77, which can be exploited by an...

Exim Permission License and Access Control Issues Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...

Mozilla Firefox Permission License and Access Control Issues Vulnerability (CNVD-2021-49133)

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers using test code to enable session history manipulation...

VMware NSX-T Privilege License and Access Control Issues Vulnerability

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

Schneider Electric C-Bus Toolkit Privilege Permission and Access Control Issues Vulnerability

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A privilege permission and access control issue vulnerability exists in C-Bus Toolkit V1.15.7 and prior versions, which arises fr...

Juniper Networks Junos OS 权限许可和访问控制问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to privilege permission and access control issues, for which no information is currently available...

SUSE-SU-2021:0386-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19778 fixes several issues. The following security issues were fixed: - CVE-2020-29569: Fixed a use after free due to a logic error bsc1180008. - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access becau...

Dell EMC PowerScale OneFS Privilege Permission and Access Control Issues Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. Dell EMC PowerScale OneFS 8.1.2, 8.2.2 is vulnerable to privilege permission and access control issues. An attacker with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges could exploit this vulnerability to corrupt cryptographic operations...

1E Client Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-02032)

1E Client is an agent-less endpoint management software from 1E 1E Client USA. A security vulnerability exists in 1E Client versions 5.0.0.745, 4.1.0.267, which originates in the %PROGRAMDATA%1EClient directory that allows remote authenticated and local users to create and modify files in...

Mitel MiCollab Information Disclosure Vulnerability

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...

NZXT CAM Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-03262)

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM 4.8.0 suffers from a Privilege Permission and Access Control Issues...

PT-2020-14365 · Zyxel · Zyxel Cloudcnm Secumanager

Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue is related to weak Data.fs permissions in the affected software. Recommendations: For versions 3.1.0 and 3.1.1, update the permissions of the Data.fs file to ensur...

GOG Galaxy Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-25692)

GOG Galaxy is a game client program from the Polish company GOG. The program is used to install, launch and update games. A vulnerability exists in GOG Galaxy version 1.2.x prior to 1.2.62 and version 2.0.x prior to 2.0.12 in the context of privilege permission and access control issues. An...

Tencent Ups Top Bug-Bounty Award to $15K

The Tencent Security Response Center TSRC is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company has increased its top reward to $15,000. Tencent, a China-based global internet service provider, is opening up its existing bug-bounty program to...

MGASA-2020-0152 Updated bluez packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of...

The vulnerability of the Core RDBMS component (jackson-databind) of the Oracle Database Server system allows a attacker to cause downtime or service failures.

The vulnerability of the Core RDBMS component jackson-databind of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures through various network protocols...

cPanel Permission License and Access Control Issues Vulnerability (CNVD-2019-36127)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A vulnerability exists in cPanel for privilege permission and access control issues. Detailed vulnerability details are not...

ASUS Asus Precision TouchPad Privilege Permission and Access Control Issues Vulnerability

ASUS Asus Precision TouchPad is a touchpad driver from Asus Taiwan, China. A security vulnerability exists in ASUS Asus Precision TouchPad version 11.0.0.25. The vulnerability can be exploited by an attacker to cause a denial of service and elevation of privilege...

Medical industry struggles with PACS data leaks

In the medical world, sharing patient data between organizations and specialists has always been an issue. X-Rays, notes, CT scans, and any other data or related files have always existed and been shared in their physical forms slides, paperwork. When a patient needed to take results of a test to...