SUSE: Security Advisory (SUSE-SU-2019:3067-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0941-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:1203-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Procedure Call Runtime Windows Code Execution

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

GO-2021-0090 Denial of service in github.com/tendermint/tendermint

Proposed commits may contain signatures for blocks not contained within the commit. Instead of skipping these signatures, they cause failure during verification. A malicious proposer can use this to force consensus failures...

Siemens network software Uncontrolled Search Code Execution

Siemens’ network software vulnerabilities are related to an uncontrolled element in the search process. Exploiting these vulnerabilities can allow attackers to execute arbitrary code or cause service failures...

Routing Protocols Daemon DoS

The vulnerability of the Routing Protocols Daemon RPD implementation in JunOS and JunOS Evolved systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

JunOS DoS

The vulnerability of JunOS and JunOS Evolved operating systems, related to insufficient validation of input data, allows attackers to trigger service failures...

Apache TomEE RCE

The vulnerability of the Apache TomEE application server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or cause service failures...

NETGEAR GS110EMX GS810EMX XS512EM XS724EM Authentication Failure

The vulnerability of the microprogrammed software of NETGEAR’s GS110EMX, GS810EMX, XS512EM, and XS724EM devices is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures...

NETGEAR ProSafe Plus JGS516PE DoS

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based devices lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

JunOS Routing Engine DoS

The vulnerability of the Routing Engine module of the JunOS operating system is related to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Huawei router DoS

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

openSUSE Security Update : xen (openSUSE-2021-514)

This update for xen fixes the following issues : - CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 bsc1181254, XSA-360 - CVE-2021-28687: HVM soft-reset crashes toolstack bsc1183072, XSA-368 - L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut bsc1177204 - L3: XEN domU...

ALBA-2021:1088 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...

Node.js localhost6 Whitelist Access Confidential Data Compromise

The vulnerability of the Node.js software platform is related to the presence of localhost6 in the white list. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

SLURM srun Privilege Bypass

The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

salt-netapi Remote Execution DoS

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...