RHEL 8 : freetype (RHSA-2020:4949)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

[SECURITY] Fedora 33 Update: nss-3.58.0-3.fc33

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Moderate: Red Hat Security Advisory: gnupg2 security, bug fix, and enhancement update

An update for gnupg2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65122)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database has a privilege vulnerability, which can be exploited by an attacker to privilege as root user...

Ubuntu: Security Advisory (USN-4613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65124)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege lifting vulnerability, which can be exploited by an attacker to perform operations with root privileges...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65125)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65123)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a privilege extraction vulnerability, which can be exploited by an attacker to modify /etc/passwd privileges via a symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65127)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65129)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

GBase 8s database suffers from a power lift vulnerability (CNVD-2020-65126)

GBase 8s is a secure database management system with full intellectual property rights. GBase 8s database suffers from a power lifting vulnerability, which can be exploited by attackers to gain root privileges via symbolic link attack...

gnupg2 security, bug fix, and enhancement update

An update is available for gnupg2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating...

RLSA-2020:4490 Moderate: gnupg2 security, bug fix, and enhancement update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. The following packages have been upgraded to a later upstream version: gnupg2 2.2.20. BZ1663944 Security Fixes: GnuPG: interaction between the sks-keyserv...

Moderate: gnupg2 security, bug fix, and enhancement update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. The following packages have been upgraded to a later upstream version: gnupg2 2.2.20. BZ1663944 Security Fixes: GnuPG: interaction between the sks-keyserv...

ALSA-2020:4490 Moderate: gnupg2 security, bug fix, and enhancement update

The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. The following packages have been upgraded to a later upstream version: gnupg2 2.2.20. BZ1663944 Security Fixes: GnuPG: interaction between the sks-keyserv...

t-s-o.ru Cross Site Scripting vulnerability OBB-1479208

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cisco Firepower Threat Defense Software Hidden Commands (cisco-sa-ftd-hidcmd-pFDeWVBd)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in its CLI component which allows access to hidden commands. An authenticated, local attacker could exploit this to access these commands and make configuration changes to various sectio...

Cisco Firepower Management Center DoS (cisco-sa-ftdfmc-dos-NjYvDcLA)

According to its self-reported version, Cisco Firepower Management Center is affected by a denial of service DoS vulnerability in its licensing service component due to improper handling of system resource values. An unauthenticated, remote attacker can exploit this issue, by sending specially...

t-s-o.ru Cross Site Scripting vulnerability OBB-1468364

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cisco IOS XE Software Consent Token Bypass (cisco-sa-iosxe-ctbypass-7QHAfHkK)

According to its self-reported version, Cisco IOS XE Software is affected by a consent token bypass vulnerability. An authenticated, local attacker can exploit this via gaining shell access on an affected device and executing commands on the underlying operating system OS with root privileges...