PT-2021-28852

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.9 and fixed...

PT-2021-28486

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.16 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-28596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.19 Description The issue concerns a potential security vulnerability in the netfilter conntrack component. It was introduced in version v5.7 and fixed in version v5.11.19. The actual impact and attack...

PT-2021-24931

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.191 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.9 and...

PT-2021-24906

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-24956

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.269 Description: The issue is related to a potential security vulnerability in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-24988

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.192 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the dell-smbios-wmi module. The actual impact and attack plausibility have not yet been...

PT-2021-24990

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.234 Description: The issue concerns the RDMA/rxe component, where if the creation of a QP Queue Pair fails, not all fields are properly cleared. This is an automated ID intended to aid in the discovery of...

PT-2021-24858

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9 through 5.10.36 Description: A potential security issue exists in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.9 through 5.10.36,...

PT-2021-24510

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.32 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-24492

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.16 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-24637

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.35 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-28631

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.35 Description The issue concerns a potential security vulnerability in the netfilter conntrack component. It was introduced in version v5.7 and fixed in version v5.10.35. The actual impact and attack...

Design/Logic Flaw

In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product...

CVE-2021-20359

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966...

Depth counting error in guard() leading to multiple potential security issues in aioxmpp

Impact Possible remote Denial of Service or Data Injection. Patches Patches are available in https://github.com/horazont/aioxmpp/pull/268. They have been backported to the 0.10 release series and 0.10.3 is the first release to contain the fix. Workarounds To make the bug exploitable, an error...

CVE-2019-11996

Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a...

CVE-2019-12400

In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this...

CVE-2017-2752

A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue...

HPSBHF03606 rev. 2 - Intel Platform System BIOS Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with Intel Platform Firmware that could allow privileged...