The vulnerability of the `check_attachment_for_errors` function in the `data/general-hooks/ubuntu.py` file of the Apport operating system’s error registration service allows a hacker to disclose protected information.

The vulnerability of the checkattachmentforerrors function in the data/general-hooks/ubuntu.py file of the Apport Ubuntu system registry service is related to a data leak regarding files and directories. Exploiting this vulnerability could allow an attacker to disclose sensitive information that ...

Mozilla Firefox Security Advisory (MFSA2015-67) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-93637)

Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An information disclosure vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the Cisco AsyncOS operating system’s proxy server, which is part of the Cisco Web Security Appliance internet gateway, relates to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-93636)

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

The vulnerability of the txtID parameter in the xp_cmdshell procedure of the BillQuick Web Suite’s time and attendance system allows a perpetrator to execute arbitrary code.

The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

November 9, 2021—KB5007192 (OS Build 14393.4770) - EXPIRED

None None...

PT-2021-5002 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chrome based affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Edge's IE Mode. It may allow a remote attacker to conduct spoofing...

PT-2021-5003 · Microsoft · Malware Protection Engine

Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Malware Protection Engine MPE. Exploitation of this issue may allow an...

Microsoft Azure Real Time Operating System 信息泄露漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

Microsoft Azure Real Time Operating System 信息泄露漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. The vulnerability stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

PT-2021-5087 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing for spoofing attacks. It enables a remote attacker to affect the system...

IBM InfoSphere Information Server 信息泄露漏洞

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A security vulnerability exists in IBM InfoSphere...

PT-2021-4642 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to allow an attacker to execute arbitrary code. This can be achieved due to errors in...

WordPress 插件跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin. The WordPress plugin 404 to 301 â€" Redirect, Log and Noti...

PYSEC-2021-815

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...

rasdaemon bug fix and enhancement update

The rasdaemon packages provide a RAS Reliability, Availability and Serviceability logging tool, which records memory errors, using the EDAC tracing events. Bug Fixes and Enhancements: RFE latest rasdaemon hardware check for ROME and MILAN BZ1975506...

rasdaemon bug fix and enhancement update

An update is available for rasdaemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rasdaemon packages provide a RAS Reliability, Availability and...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to gain unauthorized access to confidential configuration information.

The vulnerability of the Cisco Firepower Management Center’s software network management interface is related to errors in the encryption of confidential information stored in the graphical interface configuration console. Exploiting this vulnerability can allow an attacker to gain unauthorized...