SUSE SLES12: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2021:3929-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3929-1 advisory. The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

Virtuozzo Hybrid Infrastructure 4.6 Update 2.1

This update provides bug fixes for the upgrade procedure with the deployed compute cluster. Vulnerability id: VSTOR-48639, VSTOR-45993 Entering maintenance fails due to VM migration errors...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.6 and fixes at least the following security issues: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off,...

Omicron Phishing Scam Already Spotted in UK

The global pandemic has provided cover for all sorts of phishing scams over the past couple of years, and the rise in alarm over the spread of the latest COVID-19 variant, Omicron, is no exception. As public health professionals across the globe grapple with what they fear could be an even more...

OPENSUSE-SU-2021:1524-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.6.8: Improving reporting of general overload state for DNS timeout errors by relays Regenerate fallback directories for October 2021 Bug fixes for onion services CVE-2021-22929: do not log v2 onion services access attempt warnings on disk...

SUSE SLED12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3877-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3877-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs...

The vulnerability of the Modbus analyzer component in Wireshark allows a hacker to trigger a service failure.

The vulnerability of the Modbus analyzer component in Wireshark relates to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by injecting specially created packets...

The vulnerability of the Adobe Experience Manager content and media management system, related to authentication errors, allows a perpetrator to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3876-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3876-1 advisory. The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2021:3848-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3848-1 advisory. The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs wer...

SUSE-SU-2021:14848-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-0089: Fixed Speculative Code Store Bypass XSA-375 bsc1186433. - CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 bsc1182654. - CVE-2021-28690: Fixed x86 TSX Async Abort protections not restored after S3 XSA-377...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows a hacker to circumvent the established security restrictions.

The vulnerability of the Mozilla Firefox browser is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to circumvent established security restrictions...

The vulnerability in the implementation of the IE Mode feature of the Microsoft Edge browser on Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Edge browser’s IE Mode implementation on Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Mozilla Firefox browser is related to errors in the configuration of security rules for iframe-based tables in XSLT stylesheets. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions by using iframes to bypass limitations such as...

The vulnerability of the 3D viewer software, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the 3D viewer software is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to errors in code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to errors in code generation management. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability of the SINEMA Remote Connect VPN service allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the SINEMA Remote Connect VPN service lies in configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privileges...

Dell EMC Streaming Data Platform 代码问题漏洞

A code issue vulnerability exists in Dell EMC Streaming Data Platform, a Dell platform for real-time ingestion, storage, and analysis of continuous streaming data, which is caused by a design or implementation error in the code development process of a network system or product. improper design o...

CVE-2021-4032

A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvmfreelapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with...

The vulnerability of the Intune management extension for Microsoft Windows operating systems lies in security configuration errors, which allow a hacker to circumvent security restrictions.

The vulnerability of the Intune Management Extension for Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a perpetrator to circumvent security restrictions...