SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:4099-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4099-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

CVE-2021-4117

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4117

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4117

yetiforcecrm is vulnerable to Business Logic Errors...

Code injection

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4117 Business Logic Errors in yetiforcecompany/yetiforcecrm

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4117

CVE-2021-4117 affects Yetiforcecrm / YetiForceCRM. Multiple connected sources describe a business logic error related to weight handling in the product data, with explicit notes that the weight value can be negative and that the issue stems from processing/validation logic. CVE entries and adviso...

CVE-2021-4111

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4111

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4111

yetiforcecrm is vulnerable to Business Logic Errors...

Code injection

yetiforcecrm is vulnerable to Business Logic Errors...

CVE-2021-4111 Business Logic Errors in yetiforcecompany/yetiforcecrm

yetiforcecrm is vulnerable to Business Logic Errors...

SUSE SLES15 Security Update : kernel (Live Patch 15 for SLE 15 SP2) (SUSE-SU-2021:4090-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4090-1 advisory. This update for the Linux Kernel 5.3.18-24534 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

SUSE SLES12: kernel-livepatch-4_12_14-150_75-default / etc (SUSE-SU-2021:4038-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4038-1 advisory. This update for the Linux Kernel 4.12.14-12291 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

PT-2021-23144 · Unknown · Yetiforcecrm

Name of the Vulnerable Software and Affected Versions: YetiForceCRM affected versions not specified Description: The issue concerns Business Logic Errors in YetiForceCRM, specifically related to the Weight of a Product. The problem arises because the weight value can be set to a negative number...

SUSE SLES12 Security Update : kernel (Live Patch 40 for SLE 12 SP3) (SUSE-SU-2021:4057-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:4057-1 advisory. This update for the Linux Kernel 4.4.180-94147 fixes one issue. The following security issue was fixed: - CVE-2021-20322: Make the ipv4 and...

SUSE SLES12 Security Update : kernel (Live Patch 25 for SLE 12 SP5) (SUSE-SU-2021:4021-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4021-1 advisory. This update for the Linux Kernel 4.12.14-12298 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

CVE-2021-43827

discourse-footnote is a library providing footnotes for posts in Discourse. Impact When posting an inline footnote wrapped in tags e.g. ^footnote, the resulting rendered HTML would include a nested , which is stripped by Nokogiri because it is not valid. This then caused a javascript error on top...

undertow: special character in query results in server errors

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...

CVE-2021-4044 Invalid handling of X509_verify_cert() internal errors in libssl

Internally libssl in OpenSSL calls X509verifycert on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error for example out of memory. Such a negative return value is mishandled by OpenSSL and will cause an IO...