13333 matches found
CVE-2021-24086
creationtimestamp| type| source ---|---|--- 2021-02-09 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2021/02/multiple-security-updates-affecting-tcp-ip/ 2021-02-15 11:00:19+00:00| seen| https://t.me/CyberSecurityTechnologies/2708 2021-03-03 05:37:03+00:00| seen|...
About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Apple Releases Security Updates
Apple has released security updates to address vulnerabilities in macOS Big Sur 11.2, macOS Catalina 10.15.7, and macOS Mojave 10.14.6. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security upda...
Microsoft Releases February 2021 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s February 2021 Security Update Summary and...
Fedora 32 : pngcheck (2021-e24167b0e8)
The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e24167b0e8 advisory. - Buffer overflow fixes: 1. Fix buffer overflow on large MNG LOOP chunk RHBZ1908559. 2. Fix a buffer overrun for certain invalid MNG PPLT chunk contents...
Security Updates for Microsoft Exchange Server (February 2021)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by a spoofing vulnerability: - A spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-24085 %NASLMINLEVEL 7030...
About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002
About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002 This document describes the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security...
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...
Security Updates for Microsoft Skype for Business (February 2021)
The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-24073 - A...
Security Updates for Microsoft Excel Products (February 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-24067, CVE-2021-24068,...
Security Updates for Microsoft Exchange Server (CVE-2021-1730) (February 2021)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by a spoofing vulnerability: - A spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-1730 %NASLMINLEVEL 70300...
APSB21-08 Security updates available for Magento
Magento has released updates for Magento Commerce and Magento Open Source editions. These updates resolve vulnerabilities rated important and critical. Successful exploitation could lead to arbitrary code execution...
Vulnerabilities fixed in Microsoft Dynamics
Microsoft has fixed two vulnerabilities in Dynamics. A malicious party could exploit the vulnerabilities to impersonate as another user and potentially gain access to sensitive data. Microsoft Dynamics: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (February 2021)
The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute...
Security Updates for Microsoft Dynamics 365 (on-premises) (February 2021)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by an information disclosure vulnerability in Microsoft Dataverse. An authenticated, remote attacker could exploit this to obtain data stored in the underlying datasets in Dataverse, that could include...
Adobe Flash Player End of Life (EOL) Detection
The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mozilla Releases Security Updates for Firefox and Firefox ESR
Mozilla has released security updates addressing a vulnerability affecting Firefox and Firefox ESR. An attacker can take advantage of this vulnerability to take control of an affected system. CISA encourages users and administrators to review the Mozilla security advisory for Firefox 85.0.1 and...
Fedora 33 : mingw-jasper (2021-8ecb3686ca)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8ecb3686ca advisory. - jp2decode in jp2/jp2dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of...
MGASA-2021-0069 Updated nodejs packages fix security vulnerabilities
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method...
Cisco Patches Recently Disclosed "sudo" Vulnerability (CVE-2021-3156) in Multiple Products
While Punxsutawney Phil may have said we only have six more weeks of winter, the need to patch software and hardware weaknesses will, unfortunately, never end. Cisco has released security updates to address vulnerabilities in most of their product portfolio, some of which may be exploited to gain...