openSUSE Security Update : nghttp2 (openSUSE-2021-341)

This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of stati...

PT-2021-11572 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 2.7 Description: The issue allows DLL Injection due to the desktop client loading development plugins from certain directories when they are present. Recommendations: For versions prior to 2.7, update to version 2.7...

The vulnerability of the OpenSLP service of the VMware ESXi hypervisor allows a attacker to execute arbitrary code.

The vulnerability of the OpenSLP supervisor in VMware ESXi is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Junos operating system, related to the operation of data out of the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Junos operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a service failure using specially crafted DHCP packets...

February 24, 2021—KB4601382 (OS Builds 19041.844 and 19042.844) Preview

None None...

OTRS AG OTRSTicketForms Information Disclosure Vulnerability

OTRS AG OTRSTicketForms is a functional add-on from OTRS Germany. Using it it is possible to display different ticket masks and forms in the agent and external interfaces, depending on which dynamic fields are relevant for the customer request. An information disclosure vulnerability exists in OT...

KB5000751: Setup Dynamic Update for Windows 10, version 2004 and 20H2: February 23, 2021

None None...

The vulnerability of the media subsystem in Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the media subsystem in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Vulnerability fixed in Atlassian Bitbucket

By placing a specially crafted DLL file in the Bitbucket installation directory, an unauthorized user can execute arbitrary code with SYSTEM privileges on a Windows system on which the vulnerable Bitbucket software is installed. Atlassian has released updates to fix the vulnerability. fix. For mo...

CVE-2020-8625

A buffer overflow flaw was found in the SPNEGO implementation used by BIND. This flaw allows a remote attacker to cause the named process to crash or possibly perform remote code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Dynamic modification of RPyC service due to missing security check

Impact Version 4.1.0 of RPyC has a vulnerability that affects custom RPyC services making it susceptible to authenticated remote attacks. Patches Git commits between September 2018 and October 2019 and version 4.1.0 are vulnerable. Use a version of RPyC that is not affected. Workarounds The commi...

The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from buffer overflows in dynamic memory, allowing attackers to exploit their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Adobe Dreamweaver 20.2.0 < 20.2.1 / 21.0 < 21.1 Information disclosure (APSB21-13)

The version of Adobe Dreamweaver installed on the remote Windows host is prior to 20.2.1, 21.1. It is, therefore, affected by a vulnerability as referenced in the APSB21-13 advisory. - Adobe Dreamweaver versions 21.0 and earlier and 20.2 and earlier is affected by an untrusted search path...

Microsoft Edge Code Issue Vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A code issue vulnerability exists in Edge, which contains an untrusted search path vulnerability that allows an attacker to load a malicious DLL library from its current directory...

CVE-2020-25245

A vulnerability has been identified in DIGSI 4 All versions V4.94 SP1 HF 1. Several folders in the %PATH% are writeable by normal users. As these folders are included in the search for dlls, an attacker could place dlls there with code executed by SYSTEM...

Microsoft Dynamics 365 (on-premises) Update 2.26

None None...

DIGSI 4 权限许可和访问控制问题漏洞

SIEMENS DIGSI 4 is a driver from SIEMENS USA. Provides device driver functionality. A privilege license and access control issue vulnerability exists in SIEMENS DIGSI 4. The vulnerability stems from the fact that several folders in \%PATH\% can be written to by a normal user, and can be exploited...

CVE-2021-26825

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

Integer overflow

An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::loadimage function at line: const sizet buffersize = tgaheader.imagewidth tgaheader.imageheight pixelsize; The bug leads to...

CVE-2020-1779

When dynamic templates are used OTRSTicketForms, admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior...