1779 matches found
nss security and bug fix update
An update is available for nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
RHEL 8 : nss (RHSA-2021:0538)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0538 advisory. Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server...
Debian: Security Advisory (DSA-4848-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4848-1 : golang-1.11 - security update
Multiple security issues were discovered in the implementation of the Go programming language, which could result in denial of service and the P-224 curve implementation could generate incorrect outputs. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Cumulative Update 7 for Exchange Server 2019
None None...
PT-2021-2951 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to a lack of protection for SQL query structures in the Magento Commerce platform, which can be...
Cisco Unified Communications Products Vulnerabilities (cisco-sa-imp-trav-inj-dM687ZD6)
According to its self-reported version, multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...
In Go before 1.14.14 and 1.15.x before 1.15.7 crypto/elliptic/p224.go can generate incorrect outputs related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
...
PYSEC-2021-865
In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with stripcomments=False...
openSUSE Security Update : go1.15 (openSUSE-2021-192)
This update for go1.15 fixes the following issues : Go was updated to version 1.15.7 bsc1175132. Security issues fixed : - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
Security update for go1.14 (moderate)
openSUSE Security Update: Security update for go1.14 Announcement ID: openSUSE-SU-2021:0194-1 Rating: moderate References: 1164903 1181145 1181146 Cross-References: CVE-2021-3114 CVE-2021-3115 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata is no...
OPENSUSE-SU-2021:0194-1 Security update for go1.14
This update for go1.14 fixes the following issues: Go was updated to version 1.14.14 bsc1164903. Security issues fixed: - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
OPENSUSE-SU-2021:0192-1 Security update for go1.15
This update for go1.15 fixes the following issues: Go was updated to version 1.15.7 bsc1175132. Security issues fixed: - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
OPENSUSE-SU-2021:0190-1 Security update for go1.14
This update for go1.14 fixes the following issues: Go was updated to version 1.14.14 bsc1164903. Security issues fixed: - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
Denial of Service Vulnerability in TL-ER6229GPE-AC of P&L Technologies Ltd.
The TL-ER6229GPE-AC is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER6229GPE-AC, which can be exploited by an attacker to cause a denial of service by sending a carefully constructed packet...
Security update for go1.15 (moderate)
openSUSE Security Update: Security update for go1.15 Announcement ID: openSUSE-SU-2021:0192-1 Rating: moderate References: 1175132 1181145 1181146 Cross-References: CVE-2021-3114 CVE-2021-3115 Affected Products: openSUSE Leap 15.2 An update that solves two vulnerabilities and has one errata is no...
Security update for go1.14 (moderate)
openSUSE Security Update: Security update for go1.14 Announcement ID: openSUSE-SU-2021:0190-1 Rating: moderate References: 1164903 1181145 1181146 Cross-References: CVE-2021-3114 CVE-2021-3115 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one errata is no...
SUSE-SU-2021:0223-1 Security update for go1.15
This update for go1.15 fixes the following issues: Go was updated to version 1.15.7 bsc1175132. Security issues fixed: - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:0223-1)
This update for go1.15 fixes the following issues : Go was updated to version 1.15.7 bsc1175132. Security issues fixed : CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...