SUSE: Security Advisory (SUSE-SU-2020:14546-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-17000 · Amd +11 · All Supported Processors +8

Name of the Vulnerable Software and Affected Versions: All supported CPU products affected versions not specified Description: The issue concerns potential floating point value injection in CPU products, which, when combined with software vulnerabilities related to speculative execution, can lead...

PT-2021-12810

Name of the Vulnerable Software and Affected Versions: IntelR Processor Diagnostic Tool versions prior to 4.1.5.37 Description: The issue is related to an uncontrolled search path element in the IntelR Processor Diagnostic Tool, which may allow an authenticated user to potentially enable escalati...

CVE-2021-33829: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...

Intel Processor Diagnostic Tool code-related vulnerabilities

Intel Processor Diagnostic Tool IPDT is a processor functionality diagnostic tool from IntelR Corporation. A security vulnerability exists in IntelR Processor Diagnostic Tool versions prior to 4.1.5.37, which stems from an uncontrolled search path element in the tool that could allow an...

CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Intel® Security Library Advisory

Summary: Potential security vulnerabilities in the Intel® Security Library may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0133 Description: Key...

Intel® Processor Advisory

Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24511 Description: Improper isolation of shared resources in some IntelR...

Intel® Processor Diagnostics Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostics Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8702 Description: Uncontrolled search path element in the...

Intel INTEL-SA-00463 Buffer Error Vulnerability

Intel INTEL-SA-00463 is the BIOS firmware for Intel® processors from Intel Corporation USA. INTEL-SA-00463 suffers from a buffer error vulnerability that stems from a processor firmware out-of-bounds write that could allow a privileged user to enable denial of service via local access...

Intel Processors: Input validation error vulnerability

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. An input validation error vulnerability exists in the firmware of Intel Processors, which arises from a network system or product that does not properly...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.cr1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.cr1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta2) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.1.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.beta2 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta2) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta2 Source cves:...

com.github.bingoohuang:quartz-glass (>=0.0.1, <=0.0.9), org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.1.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.bingoohuang:quartz-glass =0.0.1, =0.0.9 -...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.cr1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.1.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.cr1 Source cves:...

UVI-2021-1000569 scsi: target: core: Avoid smp_processor_id() in preemptible code

scsi: target: core: Avoid smpprocessorid in preemptible code This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

PT-2021-25040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.9 Description The issue is related to the use of smp processor id in preemptible code within the SCSI target core. The actual impact and potential for attack have not been proven yet. Recommendations For...