306 matches found
SUSE-SU-2021:3593-1 Security update for binutils
This update for binutils fixes the following issues: Update to binutils 2.37: The GNU Binutils sources now requires a C99 compiler and library to build. Support for the arm-symbianelf format has been removed. Support for Realm Management Extension RME for AArch64 has been added. A new linker opti...
All Vulnerabilities for algerie360.com Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| algerie360.com ---|--- Open Bug Bounty...
A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017
A3: Sensitive Data Exposure ❗️ — Top 10 OWASP 2017 Introduction I feel like a lot of mystery surrounds this issue from the top 10 OWASP vulnerabilities. A lot of people seem to wonder which data is sensitive when exposed. Some people seem to think every single API key disclosed in a JS file is a...
Libelfin Denial of Service Vulnerability (CNVD-2021-66402)
Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::skipform function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...
Libelfin Denial of Service Vulnerability (CNVD-2021-66406)
Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::uleb function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service by causing a segmentation error via a speciall...
Libelfin 注入漏洞
Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. linetable::linetable function of Libelfin 0.3 is vulnerable to a denial of service. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a segmentation...
IBM Security Access Manager 调试信息泄露漏洞
IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. A debug information disclosure vulnerability exists in IBM Security Access Manager...
Algolia: PHP-FPM status page disclosure
A page leaking debug information was publicly accessible...
OPENSUSE-SU-2020:2301-1 Security update for gcc7
This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions...
OPENSUSE-SU-2020:2300-1 Security update for gcc7
This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions...
SUSE-SU-2020:3749-1 Security update for gcc7
This update for gcc7 fixes the following issues: - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instructions...
OPENSUSE-SU-2020:1804-1 Security update for binutils
This update for binutils fixes the following issues: binutils was updated to version 2.35. jscECO-2373 Update to binutils 2.35: The assembler can now produce DWARF-5 format line number tables. Readelf now has a 'lint' mode to enable extra checks of the files it is processing. Readelf will now...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
Information disclosure
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 are affected by a denial-of-service vulnerability caused by failing to catch exceptions in a servlet, which can leak debug information and enable DoS in future attacks. Affected product: IBM Cognos Analytics 11.0, 11.1 (servlet handling). Root cause: unhandled e...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
CVE-2020-4388: Improper Handling of Exceptional Conditions
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
