Vulnerability fixed in IBM WebSphere Application Server

IBM WebSphere Application Server is vulnerable to an XML External Entity Injection XXE attack when processing XML data. An external attacker can exploit this security vulnerability to obtain obtain sensitive information. IBM has released updates to fix the vulnerability. For more information, see...

RHEL 8 : openvswitch2.13 (RHSA-2021:0497)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0497 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic...

Security Updates for Microsoft Visual Studio Products (February 2021)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-1639 - A denial of servic...

Vulnerabilities fixed in Schneider Electric equipment

Vulnerabilities have been fixed in Schneider Electric devices. The vulnerabilities allow an unauthorized malicious person at remotely able to cause a denial-of-service and to obtain sensitive data Schneider Electric has released updates to address the vulnerabilities. fix. More information can be...

Fedora 33 : czmq (2021-c756747fd0)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-c756747fd0 advisory. - Downstream of zeromq, rebuilt to fix security issues FEDORA-2021-c756747fd0 Note that Nessus has not tested for this issue but has instead relied only on t...

Vulnerabilities fixed in Adobe Acrobat

Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates fix multiple critical and important vulnerabilities. Successful misuse can lead to execution of arbitrary code in the context of the current user or obtain elevated privileges. Adobe has received...

Vulnerabilities fixed in Xerox WorkCentre

Xerox has fixed several vulnerabilities in WorkCentre. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service or to perform a Cross-Site Scripting XSS attack. The latter can lead to the execution of arbitrary script code in the browser used to visit the application is...

olcne security update

kata-runtime 1.7.3-1.0.7 - Address CVE-2020-28914 kata 1.7.3-1.0.12 - UEKR6 guest kernel support 1.7.3-1.0.11 - Address CVE-2020-28914 kubernetes 1.17.9-1.0.6 - Kata CVE-2020-28914 olcne 1.1.10-1 - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to...

Fedora 33 : firefox (2021-d8c4f1d99f)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-d8c4f1d99f advisory. - Update to latest upstream version 85.0.1 FEDORA-2021-d8c4f1d99f Note that Nessus has not tested for this issue but has instead relied only on the...

Microsoft Patch Tuesday, February 2021 Edition

Microsoft today rolled out updates to plug at least 56 security holes in its Windows operating systems and other software. One of the bugs is already being actively exploited, and six of them were publicized prior to today, potentially giving attackers a head start in figuring out how to exploit...

Attackers Exploit Critical Adobe Bug, Target Windows

Adobe is warning of a critical vulnerability that has been exploited in the wild to target Adobe Reader users on Windows. The vulnerability CVE-2021-21017 has been exploited in “limited attacks,” according to Adobe’s Tuesday advisory, part of its regularly scheduled February updates. The flaw in...

Multiple Security Updates Affecting TCP/IP:  CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086

Today Microsoft released a set of fixes affecting Windows TCP/IP implementation that include two Critical Remote Code Execution RCE vulnerabilities CVE-2021-24074, CVE-2021-24094 and an Important Denial of Service DoS vulnerability CVE-2021-24086. The two RCE vulnerabilities are complex which mak...

February 9, 2021—KB4601347 (Monthly Rollup)

None None...

September 8, 2020—KB4570333 (OS Build 17763.1457)

None None...

February 9, 2021—KB4601349 (Security-only update)

None None...

Multiple Security Updates Affecting TCP/IP:  CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086

Today Microsoft released a set of fixes affecting Windows TCP/IP implementation that include two Critical Remote Code Execution RCE vulnerabilities CVE-2021-24074, CVE-2021-24094 and an Important Denial of Service DoS vulnerability CVE-2021-24086. The two RCE vulnerabilities are complex which mak...

February 9, 2021-KB4601887 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

September 8, 2020—KB4577038 (Monthly Rollup)

None None...

February 9, 2021—KB4601319 (OS Builds 19041.804 and 19042.804)

None None...

CVE-2021-24094

creationtimestamp| type| source ---|---|--- 2021-02-09 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2021/02/multiple-security-updates-affecting-tcp-ip/ 2021-02-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=550 2021-02-15 11:00:19+00:00| seen|...