PT-2021-28418

Name of the Vulnerable Software and Affected Versions: tpm2-tss-engine affected versions not specified Description: The issue concerns the compilation of tpm2-tss-engine, where fixed compilation flags were causing problems. Specifically, the use of these flags resulted in a non-position-independe...

openSUSE Security Update : OpenIPMI (openSUSE-2021-512)

This update for OpenIPMI fixes the following issues : - Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Security update for OpenIPMI (moderate)

openSUSE Security Update: Security update for OpenIPMI Announcement ID: openSUSE-SU-2021:0512-1 Rating: moderate References: 1183178 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for OpenIPMI fixes the following issues:...

OPENSUSE-SU-2021:0512-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. This update was imported from the SUSE:SLE-15-SP1:Update update project...

PT-2021-27335

Name of the Vulnerable Software and Affected Versions: OpenIPMI affected versions not specified Description: The issue concerns OpenIPMI creating non-position independent binaries. There is no information provided about the estimated number of potentially affected devices worldwide or details abo...

CVE-2020-9978

This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be ab...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged...

Design/Logic Flaw

This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be ab...

CVE-2020-9978

This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be ab...

CVE-2020-29633: Undefined Security Weakness

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged...

SUSE SLED15 / SLES15 Security Update : OpenIPMI (SUSE-SU-2021:1010-1)

This update for OpenIPMI fixes the following issues : Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2021:1010-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - Fixed an issue where OpenIPMI was creating non-position independent binaries bsc1183178...

PT-2021-28414

Name of the Vulnerable Software and Affected Versions: OpenIPMI affected versions not specified Description: The issue with OpenIPMI involves the creation of non-position independent binaries. There is no information provided about the estimated number of potentially affected devices worldwide or...

Equipment Inventory System 1.0 Cross Site Scripting

Exploit Title: Equipment Inventory System 1.0 - 'multiple' Stored XSS Exploit Author: Jitendra Kumar Tripathi Vendor Homepage: https://www.sourcecodester.com/php/11327/equipment-inventory.html Software Link:...

VoIPmonitor 27.5 Missing Memory Protections

VoIPmonitor static builds are compiled without any standard memory corruption protection - Fixed versions: N/A - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-04-voipmonitor-staticbuild-memory-corruption-protection - VoIPmonitor Security Advisory: none ...

WS-2021-0126

Skia in versions 0.24.0 and 0.25.0 is vulnerable to use-after-position in std::1::uniqueptrSkSL::Expression, std::1::defaultdeleteSkSL::Expression...

MongoDB Node.js client side field level encryption library may not be validating KMS certificate

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

Omron CX-One NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

Omron CX-One NCI File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...

Omron CX-One NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NCI...