CVE-2020-0143

In nfadmndeffindnexthandler of nfadmndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for...

File Containment Vulnerability in DM Building System (CNVD-2020-40756)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a file containment vulnerability , attackers can exploit the vulnerability to obtain server privileges...

Multiple Storage-based Cross-site Scripting Vulnerabilities in DM Building System Frontend

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system front-end exists in a number of storage-based cross-site scripting vulnerabilities. Attackers can exploit the vulnerability to obta...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SQL Injection Vulnerability in Dm Website Building System

DM enterprise building system is developed by php + mysql for small and medium-sized enterprise website construction of a set of open source cms. Dm website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2020:0374 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

File Inclusion Vulnerability in DM Website System

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a file inclusion vulnerability , attackers can use the vulnerability to obtain web server privileges...

SQL Injection Vulnerability in DM Website Building System (CNVD-2020-23766)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information on the sit...

SQL Injection Vulnerability in DM Website Building System (CNVD-2020-23763)

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system has a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information on the sit...

Security Bulletin: Vulnerabilities in WebSphere Application Server Liberty affect IBM Jazz technology

Summary There are vulnerabilities in IBM WebSphere Application Server Liberty that affect Rhapsody DM. Vulnerability Details Refer to the security bulletinss listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Rhapsody DM| 6.0.6 Rhapsody DM|...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

The vulnerability of the multires_load_old_dm component in the software suite for creating 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the multiresloadolddm component in the software suite used for creating 3D computer graphics in Blender is due to a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created blend file...

systemd security, bug fix, and enhancement update

239-18.0.1 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry...

Dongyoung Media DM-AP240T/W Wireless Access Point Remote Configuration Disclosure

!/usr/bin/perl -w Dongyoung Media DM-AP240T/W Wireless Access Point Remote Configuration Disclosure Copyright 2019 c Todor Donev Disclaimer: This or previous programs are for Educational purpose ONLY. Do not use it without permission. The usual disclaimer applies, especially the fact that Todor...

The vulnerability of the fly-admin-dm graphic input component in the FLY operating system environment of Astra Linux, related to a resource management error, allows attackers to trigger a service failure.

The vulnerability of the fly-admin-dm graphic input component in the FLY operating environment of the Astra Linux system is related to inactive restart options. Exploiting this vulnerability allows a remote attacker to cause service failure...

The vulnerability of the fly-dm component in the FLY operating system environment of the Astra Linux system allows a hacker to trigger a service failure.

The vulnerability of the fly-dm component in the FLY operating environment of the Astra Linux system is related to access control errors during command generation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Information Disclosure

ceph is vulnerable to information disclosure. An authenticated user with read-only permissions can steal dm-crypt/ LUKS key...

ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key

It was found that authenticated ceph user with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption...

kernel security, bug fix, and enhancement update

4.18.0-80.7.10.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 4.18.0-80.7.10 - x86 Update stepping values for Whiskey Lake U/Y David Arcari...