CVE-2020-14101

The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...

CVE-2020-14101

CVE-2020-14101 affects Xiaomi router software: the data collection SDK in the web management interface causes leakage of the authentication token in affected builds—AX1800ROM < 1.0.336 and RM1800 Root

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2020 - Includes Oracle January 2020 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including...

Important: Red Hat Security Advisory: dotnet3.1 security and bugfix update

An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

The vulnerability of the Azure SDK for Java development software package lies in a data protection mechanism flaw, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for Java development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:0096)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0096 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

The vulnerability of the software development package for Azure SDK for C lies in a flaw related to data protection mechanisms. This flaw allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for C development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

CVE-2021-1725

Bot Framework SDK Information Disclosure Vulnerability...

PYSEC-2021-422

Bot Framework SDK Information Disclosure Vulnerability...

CVE-2021-1725

CVE-2021-1725 corresponds to a Bot Framework SDK Information Disclosure vulnerability. Connected sources show the issue in the Bot Framework’s botframework-connector component, where a malicious claim could be incorrectly authenticated when bots are not configured as a Skill. The root cause invol...

CVE-2021-1725 Bot Framework SDK Information Disclosure Vulnerability

...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On October 2020 CPU

Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...

Microsoft Bot Framework Information Disclosure Vulnerability

Microsoft Bot Framework is a development framework for building intelligent bot applications from Microsoft USA. The framework supports bots to seamlessly connect to text/messaging, Office 365 email, Skype, Slack and other services. An information disclosure vulnerability exists in the Microsoft...

KLA12040 Multiple vulnerability in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect TPF Toolkit

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by TPF Toolkit. TPF Toolkit has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-14579 DESCRIPTION: An unspecified vulnerability in Java SE related to the...

Security Bulletin: Multiple vulnerabilities affect IBM Engineering Requirements Quality Assistant On-Premises

Summary There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises including the IBM SDK, Java Technology Edition Quarterly CPU from Oct 2019, Jan 2020 and Apr 2020 plus CVE-2020-2654 deferred from Oracle Jan 2020 CPU and CVE-2019-2949 deferred from...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB - January 2021

NVIDIA has released a software update for Jetson AGX Xavier™, Jetson Xavier NX, Jetson™ TX1, Jetson TX2, Jetson Nano™, and Jetson Nano 2GB in the NVIDIA® JetPack™ software development kit SDK 4.5. The update addresses security issues that may lead to denial of service, data loss, and information...

Security Bulletin: Security vulnerability in IBM Java SDK affecting Rational Synergy (CVE-2019-4732)

Summary There is a security vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55 used by Rational Synergy versions 7.2.1.0 to 7.2.1.7. Rational Synergy has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732...