Debian DLA-2610-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...

PT-2021-14674 · Jenkins · Jenkins Cloud Statistics Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cloud Statistics Plugin versions 0.26 and earlier Description: The issue concerns a lack of permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related...

The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.

The vulnerability of the Auto-Fill function in Google Chrome is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the DNS server service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DNS server service in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to errors in pointer assignment. This vulnerability allows attackers to circumvent existing security restrictions through brute-force attacks.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through brute-force attacks...

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Jenkins Cloud Statistics 安全漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...

CVE-2020-10582

A SQL injection on the /admin/displayerrors.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to execute arbitrary SQL requests including data reading and modification on the database...

The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the integration component of the Magento Commerce software development and management platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using...

PT-2021-6603 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.6 and later Description: The issue is related to improper authorization, allowing guest users to create issues for Sentry errors and track their status. This could potentially enable a remote attacker to access...

Invigo Automatic Device Management SQL注入漏洞

Invigo Automatic Device Management ADM is a native management tool for cellular operators that enables them to detect, maintain and manage millions of devices cost-effectively and with a high degree of reliability. A SQL injection vulnerability exists in /admin/displayerrors.php in Invigo Automat...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9135)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9135 advisory. 4.14.35-2047.500.9.3.el7uek - net/rds: Reject error code change Ka-Cheong Poon Orabug: 32577425 - PCI: hotplug: Add module parameter to allow user...

Foxit PhantomPDF 缓冲区错误漏洞

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A memory corruption vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program not properly validating user input. An attacker could exploit this vulnerability t...

The vulnerability of the HTTP/2 stream in the Apache HTTP Server, related to pointer dereferencing errors, allows attackers to cause a service failure.

The vulnerability of the HTTP/2 stream in the Apache HTTP Server is related to incorrect writing of the zero pointer. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Windows operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions...

OPENSUSE-SU-2021:0427-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate bsc1182333 - CVE-2021-23841: Fixed a Null pointer dereference in X509issuerandserialhash bsc1182331 - Fixed unresolved error codes in FIPS bsc1182959. This update was imported from t...

The vulnerability of the Google Chrome browser’s Network Internals interface allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s network internal interfaces is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `show_transport_handle` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the showtransporthandle function /scsi/scsitransportiscsi.c in the Linux operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Cisco WebEx Meetings software allows a perpetrator to compromise the integrity of protected information.

The vulnerability of Cisco WebEx Meetings software relates to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to privilege management errors, allowing a hacker to elevate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...