perl-IO-Socket-SSL bug fix and enhancement update

An update is available for perl-IO-Socket-SSL. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

python-networkx bug fix and enhancement update

An update is available for python-networkx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

python-flask bug fix and enhancement update

An update is available for python-flask. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

python-greenlet bug fix and enhancement update

An update is available for python-greenlet. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

pmdk bug fix and enhancement update

An update is available for pmdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

graphviz bug fix and enhancement update

An update is available for graphviz. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpris...

sscg bug fix and enhancement update

An update is available for sscg. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

wireshark bug fix and enhancement update

An update is available for wireshark. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

http-parser bug fix and enhancement update

An update is available for http-parser. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

lasso bug fix and enhancement update

An update is available for lasso. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Arbitrary File Deletion Vulnerability in Bitter Chrysanthemum OA

Bitter Chrysanthemum OA office system is a general-purpose collaborative OA management software for small and medium-sized enterprises. Bitter Daisy OA arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any server file...

CVE-2019-19096

The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality...

CVE-2020-3138

A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacker could exploit this vulnerability by...

Unauthorized Access Vulnerability in Kaixin Worklog 28.0

Worklog is a B/S based software for structuring intra-enterprise collaborative work. An unauthorized access vulnerability exists in Worklog 28.0, which can be exploited by attackers to obtain sensitive information...

new packages: gcc-toolset-9-systemtap

An update is available for gcc-toolset-9-systemtap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GCC Toolset is a compiler toolset that provides recent versio...

SQL Injection Vulnerability in TopCloud Self-service Website Building System

The top cloud station system is Chongqing Chujie Technology Co., Ltd. independent research and development "PC + cell phone + micro site + shopping" integration of the whole network marketing PHP enterprise intelligent station software. TopCloud self-service website builder system SQL injection...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-37387)

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit the vulnerability to gain an unauthorized read of a portion of PeopleSoft Enterprise PeopleTools accessible...

RLSA-2019:2720 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Deps module contains fundamental packages required as dependencies for the pki-core module by Rocky Enterprise Software Foundation Certificate System. Security Fixes: jackson-databind: failure to block the logback-core class from polymorphic deserialization leadi...

The vulnerability in the software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to disclose protected information or execute arbitrary code.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s web portal software exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or execute arbitrary code...

SUSE SLED12 / SLES12 Security Update : bzip2 (SUSE-SU-2019:2013-1)

This update for bzip2 fixes the following issues : Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors bsc1139083. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...