SUSE SLED15 / SLES15 Security Update : clamav (SUSE-SU-2021:1190-1)

This update for clamav fixes the following issues : CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 Fix errors when scanning files...

SUSE SLES12 Security Update : clamav (SUSE-SU-2021:1174-1)

This update for clamav fixes the following issues : CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 Fix errors when scanning files...

Microsoft Windows Multiple Vulnerabilities (KB5001347)

This host is missing a critical security update according to Microsoft KB5001347 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5001342)

This host is missing a critical security update according to Microsoft KB5001342 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-2620

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in privilege management within the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...

PT-2021-2685 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in code generation management in Microsoft Word, allowing remote attackers to execute arbitrary code. This can be exploited to gain unauthorized access...

Microsoft Azure DevOps Server 信息泄露漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. An information disclosure vulnerability exists in Azure DevOps Server and Team...

PT-2021-2714 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio Code affected versions not specified Description: The issue is related to errors in code generation management in the Microsoft Visual Studio Code editor. Exploitation of this issue may allow an attacker to execute...

PT-2021-2639 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...

PT-2021-2691 · Microsoft · Azure Ad +1

Name of the Vulnerable Software and Affected Versions: Azure AD affected versions not specified Description: The issue is related to errors in security settings of the Microsoft Azure Active Directory cloud platform, which can be exploited to impact the confidentiality, integrity, and availabilit...

GitHub Security Lab: ihsinme: CPP Add query for CWE-570 detect and handle memory allocation errors.

This bug was reported directly to GitHub Security Lab...

The vulnerability in the web interface for managing microprogrammed software routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows a hacker to bypass authentication checks and load arbitrary files.

The vulnerability of the web-based management interface for microprogrammed software routers RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P is related to control session errors on affected devices. Exploiting this vulnerability allows a malicious actor to bypass...

The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN system allows a hacker to overwrite any files they desire.

The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network is related to access control errors. Exploiting this vulnerability could allow a attacker to rewrite any files at will...

OpenIAM Access Control Error Vulnerability

OpenIAM is a fully integrated identity and access management platform. Vulnerabilities exist in OpenIAM versions prior to 4.2.0.3 due to access control errors in the "Create User", "Modify User Privileges" and "Password Reset" operations. No details of the vulnerabilities are available at this ti...

The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the implementation of the TLS protocol by the OpenSSL library, which allows a attacker to cause a service failure

The vulnerability of the TLS protocol implementation in the OpenSSL library is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause a service failure by using a specially crafted “ClientHello” message...

The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Titan M security module’s Android operating system kernels is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...