[SECURITY] Fedora 34 Update: python3.9-3.9.4-1.fc34

Python 3.9 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

Debian: Security Advisory (DLA-2636-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2161

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

CVE-2021-2163

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

CVE-2021-2161

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

CentOS 8 : java-1.8.0-openjdk (CESA-2021:1301)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1301 advisory. - OpenJDK: Incomplete enforcement of JAR signing disabled algorithms Libraries, 8249906 CVE-2021-2163 Note that Nessus has not tested for this issue but has...

Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights

Summary Vulnerabilities in Java affects IBM Cloud Application Business Insights Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, low...

The vulnerability in the set of libraries for Mojo browser-based applications on Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Mojo browser libraries for Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2...

Data Corruption

vyper causes data corruption. Incorrect data handling allows an attacker to cause a data corruption via certain Web3 libraries with Vyper-deploy forwarder proxy contracts using Vyper's built-in createforwarderto function...

Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

甲骨文 Oracle Java SE Embedded 输入验证错误漏洞

Oracle Java SE Embedded is a Java platform for portable applications for embedded systems from Oracle Corporation. An input validation error vulnerability exists in Java SE Embedded 8u281, which stems from incorrect input validation of the Libraries component in Oracle GraalVM Enterprise Edition...

Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries

Summary Security Bulletin: Resilient OnPrem versions 30.x are affected by vulnerabilities in dependent libraries Vulnerability Details Summary Resilient OnPrem v31.0 has addressed vulnerabilities in a number of dependent libraries. Vulnerability Details CVEID: CVE-2017-9735 DESCRIPTION: Jetty cou...

Security Bulletin: An unspecified vulnerability in Java SE related to the Libraries component could affect InfoSphere Streams version 4.3

Summary An unspecified vulnerability in Java SE related to the Libraries component could affect InfoSphere Streams version 4.3. Please see details below. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow...

CVE-2021-27028

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files...

VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption

Background @tjayrush reported a data handling issue with certain Web3 libraries using Vyper-deploy forwarder proxy contracts using our Vyper's built-in createforwarderto function prior to our change to support EIP-1167 style forwarder proxies. Impact If you are an end user of a forwarder-style...

biz.grundner.vaadin-in-spring:spring-vaadin (=1.0), com.ahome-it:ahome-tooling-server-vaadin-core (=1.0.112-RELEASE) +102 more potentially affected by CVE-2019-25028 via com.vaadin:vaadin-server (>=7.4.0 <=7.7.2)

com.vaadin:vaadin-server MAVEN version =7.4.0, =1.3, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.0.0, =1.0.0.BETA5 - com.mantledillusion.vaadin:vaadin-metrics-observer-7 =1.0.0.ALPHA1 and more Source cves: CVE-2019-25028 Source advisory: OSV:GHSA-Q74R-4XW3-PPX9...

SUSE: Security Advisory (SUSE-SU-2016:2505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2947-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...