Cisco Common Services Platform Collector Improper Logging Restriction Vulnerability

A vulnerability in the web application of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to specify non-log files as sources for syslog reporting. This vulnerability is due to improper restriction of the syslog configuration. An attacker could exploit...

Low: Red Hat Security Advisory: Openshift Logging 5.2.3 bug fix and security update

An update is now available for OpenShift Logging 5.2. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Low: Red Hat Security Advisory: Openshift Logging 5.1.4 bug fix and security update

An update is now available for OpenShift Logging 5.1.4. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Cisco Common Services Platform Collector 安全漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. versions of Cisco Common Services Platform Collector prior to 2.9.1.1 of the Web application contains an improper logging restriction...

CVE-2021-38882

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164...

Code injection

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164...

CVE-2021-38882

IBM Spectrum Scale versions 5.1.0–5.1.1.1 expose a vulnerability in the filesystem audit logging feature that could allow a privileged administrator to destroy audit logging records before their expiration. The issue requires local access with high privileges; no exploitation details are provided...

CVE-2021-38882: Undefined Security Weakness

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164...

PT-2021-22307

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.1.0 through 5.1.1.1 Description The issue allows a privileged admin to destroy filesystem audit logging records before expiration time. Recommendations For IBM Spectrum Scale versions 5.1.0 through 5.1.1.1, consid...

Moderate: Red Hat Security Advisory: Openshift Logging 5.3.0 bug fix and security update

An update is now available for OpenShift Logging 5.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in th...

Security Bulletin: A vulnerability in filesystem audit logging affects IBM Spectrum Scale.

Summary A security vulnerability has been identified in IBM Spectrum Scale FAL that could allow a privileged admin to destroy filesystem audit logging records before their expiration time. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-38882 DESCRIPTION: IBM...

CVE-2021-30263

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-30263

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-30263

CVE-2021-30263 is a Qualcomm/ Snapdragon-focused race-condition vulnerability caused by a lack of synchronization when the On-Device Logging node is opened twice concurrently. Public details specify affected families and devices, including Snapdragon Compute/Industrial IOT/Mobile/Voice & Music li...

CVE-2021-30263

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant

Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and targeting Hong Kong websites related to a media outlet and a prominent pro-democracy labor and political group to deliver a never-before-see...

CVE-2021-30263: Use After Free

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

PT-2021-18691

Name of the Vulnerable Software and Affected Versions Snapdragon Compute affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Voice & Music affected versions not specified Description A possible race...

Mozilla Firefox Security Advisory (MFSA2014-90) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2021-34598

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active...