SUSE-SU-2020:3384-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402...

VMware Fusion 11.0.x < 11.5.6 Multiple Vulnerabilities (VMSA-2020-0023)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.6. It is, therefore, affected by the following vulnerabilities: - A time-of-check time-of-use flaw exists related to ACPI device handling that allows an authenticated administrator to leak memory...

Intel High Definition Audio drivers license issue vulnerability

Intel High Definition Audio drivers is an audio codec driver from Intel. An authorization issue vulnerability exists in Intel High Definition Audio drivers that arises from a lack of authentication measures or insufficient authentication strength in a networked system or product. No details of th...

Vertafore data ereach exposes license details of 27.7M Texas drivers

By Deeba Ahmed Vertafore claims the incident resulted from human error since the data was stored on an unprotected external storage service. This is a post from HackRead.com Read the original post: Vertafore data ereach exposes license details of 27.7M Texas drivers...

CVE-2020-12328

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12326

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12325

Improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12324

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12327

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12327

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12324

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12326

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

Session fixation

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12326

CVE-2020-12326 affects Intel® Thunderbolt™ DCH drivers for Windows* prior to version 72. The issue is due to improper initialization, potentially allowing an authenticated local user to disclose information. Impact is informational disclosure on local access (per the Red Hat/NVD entries). The adv...

CVE-2020-12326

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12327

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12327

CVE-2020-12327 affects Intel® Thunderbolt™ DCH drivers for Windows before version 72. The issue is caused by insecure default variable initialization, which may allow a privileged user with local access to trigger information disclosure. Connected sources corroborate the affected product (Intel T...

CVE-2020-12328

Intel Thunderbolt DCH drivers for Windows before version 72 are affected by CVE-2020-12328, a protection mechanism failure that may allow a local privileged user to disclose information. Affected products are Intel Thunderbolt 3 and 4 DCH drivers for Windows prior to v72. Intel and system manufac...