13669 matches found
CVE-2021-2083
CVE-2021-2083 affects Oracle E-Business Suite iSupport (component: User Responsibilities). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows unauthenticated, network-accessible attacks over HTTP that require a user interaction (UI:R), potentially leading to unauthor...
CVE-2021-2077
CVE-2021-2077 affects Oracle E-Business Suite’s Oracle iStore (Shopping Cart). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an easily exploitable, unauthenticated remote vulnerability over HTTP that requires user interaction to exploit and can lead to unauthorized access to sensi...
EulerOS 2.0 SP3 : nss (EulerOS-SA-2021-1102)
According to the versions of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a...
SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0133-1)
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-28374: Fixed a LIO security issue bsc1178372. CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559...
EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2021-1076)
According to the versions of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when...
Solaris 10 (sparc) : 152643-10
SunOS 5.10: Apache 2.4 Patch. Date this patch was last updated by Sun : Jan/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid145191; scriptversion"1.1";...
EulerOS 2.0 SP3 : python-ipaddress (EulerOS-SA-2021-1115)
According to the version of the python-ipaddress package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow...
EulerOS 2.0 SP3 : squid (EulerOS-SA-2021-1123)
According to the versions of the squid packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack c...
SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2021:0166-1)
This update for dnsmasq fixes the following issues : bsc1177077: Fixed DNSpooq vulnerabilities CVE-2020-25684, CVE-2020-25685, CVE-2020-25686: Fixed multiple Cache Poisoning attacks. CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687: Fixed multiple potential Heap-based overflows when...
Denial of Service Vulnerability in TP-Link TL-R489GP-AC
TL-R489GP-AC is a PoE-AC all-in-one VPN router product developed by TP-LINK for environments such as small and micro businesses, offices and villas. A denial of service vulnerability exists in the TP-Link TL-R489GP-AC. An attacker can exploit the vulnerability to cause a denial of service to the...
SUSE SLED15 / SLES15 Security Update : php7 (SUSE-SU-2021:0124-1)
This update for php7 fixes the following issue : CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
Fedora 32 : mingw-openjpeg2 / openjpeg2 (2020-d32853a28d)
This update backports patches for CVE-2020-27841, CVE-2020-27842, CVE-2020-27843, CVE-2020-27845. ---- This update backports patches for CVE-2020-27824 and CVE-2020-27823. ---- Backport patch for CVE-2020-27814. Note that Tenable Network Security has extracted the preceding description block...
Fedora 33 : 1:dia (2020-1fe0e08c8d)
Added upstream patch to avoid infinite loop on filenames with invalid encoding CVE-2019-19451, 1778767 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...
SUSE SLES12 Security Update : php72 (SUSE-SU-2021:0125-1)
This update for php72 fixes the following issue : CVE-2020-7071: Fixed an insufficient filter in parseurl that accepted URLs with invalid userinfo bsc1180706. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
Fedora 32 : python-lxml (2020-307946cfb6)
This update fixes mXSS security vulnerability due to the use of improper parser CVE-2020-27783 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0095-1)
The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559. CVE-2020-27825: Fixed a race in the traceopen and buffer resi...
Debian DLA-2522-1 : coturn security update
A flaw was discovered in coturn, a TURN and STUN server for VoIP. By default coturn does not allow peers on the loopback addresses 127.x.x.x and ::1. A remote attacker can bypass the protection via a specially crafted request using a peer address of '0.0.0.0' and trick coturn in relaying to the...
The vulnerability in the NSS web security service of browsers Firefox, Firefox ESR, and the email client Thunderbird allows attackers to influence data integrity.
The vulnerability of the NSS network security service for Firefox browsers, Firefox ESR, and the Thunderbird email client is related to incorrect bit transmission. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-11745)
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns Network Security Services Softoken Cryptographic Module that could allow an attacker to execute arbitrary code on the system or cause a...