Fedora 32 : x11vnc (2021-c5b679877e)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c5b679877e advisory. - scan.c in x11vnc 0.9.16 uses IPCCREAT|0777 in shmget calls, which allows access by actors other than the current user. CVE-2020-29074 Note that...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (March 2021)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Fedora 32 : firefox (2021-43088486b2)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-43088486b2 advisory. - Stability update for hardware accelerated backend mozbz1694670. ---- New upstream version 86.0 FEDORA-2021-43088486b2 Note that Nessus has not tested for...

Fixed in Apache Tomcat 8.5.64

Important: Denial of Service CVE-2021-41079 When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service. This was fixed with commit b90d4fc1. This issue was first reported to the Apach...

Fedora 33 : privoxy (2021-5fb8bd8258)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5fb8bd8258 advisory. - 3.0.32 FEDORA-2021-5fb8bd8258 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number....

March 9, 2021—KB5000844 (Monthly Rollup)

None None...

March 9, 2021—KB5000840 (Security-only update)

None None...

Apple Plugs Severe WebKit Remote Code-Execution Hole

Apple is rolling out fixes for a high-severity vulnerability in its WebKit browser engine that, if exploited, could allow remote attackers to completely compromise affected systems. The mobile giant released security updates on Monday for the flaw, for its Safari browser, as well as devices runni...

SUSE-SU-2021:0737-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. - CVE-2021-26931: Fixed an issue where Linux kernel was treating gra...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

Security Updates for Microsoft Excel Products (March 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-27053, CVE-2021-27054,...

Security Updates for Microsoft Office Products (March 2021)

The Microsoft Office Products are missing security updates. They are affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-24108, CVE-2021-27054, CVE-2021-27057, CVE-2021-27059 C Tenable Netwo...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...

SAP Releases March 2021 Security Updates

SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the SAP Security Notes for March 2021 and apply the necessary...

March 9, 2021—Hotpatch KB5001080 (OS Build 17784.1588)

None None...

Security Bulletin: Google Protocol Buffers as used by IBM QRadar SIEM is vulnerable to arbitrary code execution (CVE-2015-5237)

Summary Google Protocol Buffers as used by IBM QRadar SIEM is vulnerable to arbitrary code execution Vulnerability Details CVEID: CVE-2015-5237 DESCRIPTION: Google Protocol Buffers could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in...

FreeBSD : Gitlab -- Multiple vulnerabilities (8bf856ea-7df7-11eb-9aad-001b217b3468)

Gitlab reports : JWT token leak via Workhorse Stored XSS in wiki pages Group Maintainers are able to use the Group CI/CD Variables API Insecure storage of GitLab session keys C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

About the security content of iOS 14.4.1 and iPadOS 14.4.1

About the security content of iOS 14.4.1 and iPadOS 14.4.1 This document describes the security content of iOS 14.4.1 and iPadOS 14.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

RHEL 8 : nodejs:10 (RHSA-2021:0741)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0741 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

RHEL 8 : nodejs:12 (RHSA-2021:0740)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0740 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...