Mageia: Security Advisory (MGASA-2018-0055)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0117)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : polkit (ELSA-2022-0274)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0274 advisory. 0.112-26.0.1 - Increase timeout to avoid defunct processes Orabug: 26930744 0.112-26.1 - pkexec: argv overflow results in local privilege esc. - Resolves:...

Attackers Exploit Flaw in Google Docs’ Comments Feature

Attackers are using the “Comments” feature of Google Docs to send malicious links in a phishing campaign targeted primarily at Outlook users, researchers have discovered. Researchers from email collaboration and security firm Avanan, a CheckPoint company, first observed “a new, massive wave of...

Failed transfer with low level call could be overlooked

Handle harleythedog Vulnerability details Impact There are several places where low level call is used within the contract. In particular, in SavingsAccount.sol, the external withdraw function has the to argument, which is eventually used in this code in transfer: bool success, = to.callvalue:...

Kubernetes: Broken Github Link Used in deployment docs of "github.com/kubernetes/kompose"

Report Submission Form Summary: Kubernetes have a github project github.com/kubernetes/kompose In the project there is a doc which have installation steps In the steps, doc is referring to another github account repository to clone it and install. But the github account was not registered on...

GHSA-GP2F-254M-RH32 Unauthorized access to data in @sap-cloud-sdk/core

Impact This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In some cases, when user information was missing, destinations were cached without user information, allowing other users to retrieve the same destination with its...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1357-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name

Impact preview-docs command allows path traversal if current working dir contains files with question mark ? in name and attacker knows the name. Patches It was patched starting from 1.0.0-beta.59 Workarounds Do not run openapi-cli preview-docs command in the folder which contains files with...

GHSA-Q324-Q795-2Q5P Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name

Impact preview-docs command allows path traversal if current working dir contains files with question mark ? in name and attacker knows the name. Patches It was patched starting from 1.0.0-beta.59 Workarounds Do not run openapi-cli preview-docs command in the folder which contains files with...

PT-2021-24447

Name of the Vulnerable Software and Affected Versions: openapi-cli versions prior to 1.0.0-beta.59 Description: The issue allows path traversal when the preview-docs command is executed in a directory containing files with a question mark ? in their name, provided the attacker is aware of the fil...

Remote Code Execution 0-Day (CVE-2021-40444) Hits Windows, Triggered Via Office Docs

Microsoft has disclosed the existence of a new zero-day vulnerability that affects multiple versions of Windows. This vulnerability designated as CVE-2021-40444 is currently delivered via malicious Office 365 documents and requires user input to open the file to trigger...

SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2021:2790-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2790-1 advisory. - CVE-2021-22930: http2: fixes use after free on close in stream canceling bsc1188917. Tenable has extracted the preceding description block...

Google Docs Scams Still Pose a Threat

A 2017 worm caused havoc across the internet. One researcher is warning that despite new protections put in place, it could still happen again...

CheckMK management web console cross-site scripting vulnerability

CheckMK management web console is an application. Based on Asciidoctor and automatically available on HTML docs.checkmk.com. CheckMK management web console suffers from a cross-site scripting vulnerability that could be exploited by attackers to open a backdoor on the device using HTML content...

Description of the security update for SharePoint Enterprise Server 2016: July 13, 2021 (KB5001976)

Description of the security update for SharePoint Enterprise Server 2016: July 13, 2021 KB5001976 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability, SharePoint Server information disclosure vulnerability, and SharePoint...

XSS Vulnerability in Xunfei Documents of KUDA Xunfei Co.

Xunfei Documents is an online document app produced by KUDA Xunfei that supports simultaneous editing by multiple people and multiple ends. A XSS vulnerability exists in Xunfei Document of KUDA Xunfei Corporation, which can be exploited by an attacker to obtain an administrator cookie...

Threat actors using Google Docs exploit to spread phishing links

By Habiba Rashid Cybercriminals have started employing a new phishing attack that abuses the popularity of Google Drive and Docs to bypass security filters. This is a post from HackRead.com Read the original post: Threat actors using Google Docs exploit to spread phishing links...

Threat Actors Use Google Docs to Host Phishing Attacks

Threat actors are exploiting Google Docs by hosting their attacks within the web-based document service in a new phishing campaign that delivers malicious links aimed at stealing victims’ credentials. Researchers at email and collaboration security firm Avanan discovered the campaign, which is th...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.3.3) +15 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=5.0.0, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.3.0, =5.0.0, =5.3.0, =5.1.0, =5.3.0, =5.0.0, =5.2.0, =5.1.0, =5.3.3 - org.opencds.cqf:common 0.4.0 - org.opencds.cqf:cqf-ruler-dstu3 0.4.0 - org.opencds.cqf:cqf-ruler-r4 0.4.0 - org.opencds.cqf:dstu3 0.4.0 -...