11079 matches found
SUSE-SU-2021:2344-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-19748 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. bsc1187687 - CVE-2021-0512: Fixed a...
[ASA-202107-23] ruby: multiple issues
Arch Linux Security Advisory ASA-202107-23 ========================================== Severity: High Date : 2021-07-14 CVE-ID : CVE-2021-31810 CVE-2021-32066 Package : ruby Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2138 Summary ======= The package ruby before...
Cumulative Update 10 for Exchange Server 2019 (KB5003612)
Cumulative Update 10 for Exchange Server 2019 KB5003612 Applies To Exchange Server 2019 Important This regularly scheduled cumulative update contains all the security fixes of the security updates in June and other previous security updates.. Cumulative Update 10 for Microsoft Exchange Server 201...
CVE-2021-32753
EdgeX Foundry’s CVE-2021-32753 affects Edinburgh, Fuji, Geneva, and Hanoi releases. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user exists, the proxy username is used as both the client_id and client_secret, enabling a remote attacker to perform a dictionary-ba...
CVE-2021-30116
Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...
[ASA-202107-18] gitlab: multiple issues
Arch Linux Security Advisory ASA-202107-18 ========================================== Severity: High Date : 2021-07-06 CVE-ID : CVE-2021-22223 CVE-2021-22224 CVE-2021-22225 CVE-2021-22226 CVE-2021-22227 CVE-2021-22228 CVE-2021-22229 CVE-2021-22230 CVE-2021-22231 CVE-2021-22232 CVE-2021-31799...
OpenJDK 7 <= 7u281 / 8 <= 8u272 / 11.0.0 <= 11.0.9 / 13.0.0 <= 13.0.5 / 15.0.0 <= 15.0.1 Vulnerability (2021-01-19)
The version of OpenJDK installed on the remote host is 7 prior to 7u281 / 8 prior to 8u272 / 11.0.0 prior to 11.0.9 / 13.0.0 prior to 13.0.5 / 15.0.0 prior to 15.0.1. It is, therefore, affected by a vulnerability as referenced in the 2021-01-19 advisory. Please Note: Java CVEs do not always inclu...
[ASA-202107-2] electron11: multiple issues
Arch Linux Security Advisory ASA-202107-2 ========================================= Severity: Critical Date : 2021-07-01 CVE-ID : CVE-2021-30544 CVE-2021-30548 CVE-2021-30551 Package : electron11 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2099 Summary ======= Th...
Encoding data for POST requests
Right now, when you go to copilot.github.com you're greeted with this example: async function isPositivetext const response = await fetchhttp://text-processing.com/api/sentiment/, method: 'POST', body: text=$text, headers: 'Content-Type': 'application/x-www-form-urlencoded', , ; const json = awai...
PT-2021-30853
Name of the Vulnerable Software and Affected Versions graphicsmagick versions prior to 1.3.36 Description The issue concerns several security problems and other bugs in the graphicsmagick package. These issues have been fixed in version 1.3.36. Recommendations For versions prior to 1.3.36, update...
MGASA-2021-0283 Updated kernel-linus packages fix security and other issues
The kernel-linus update in MGASA-2021-0258 contained some security fixes that caused regressions in at least some container and chroot setups. This update provides upstream 5.10.45 that adds follow-up fixes to resolve the regressions and other various security-related and other bugfixes. For more...
SUSE-SU-2021:2060-1 Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94124 fixes several issues. The following security issues were fixed: - CVE-2021-33034: Fixed a use-after-free when destroying an hcichan. This could lead to writing an arbitrary values bsc1186111. - CVE-2021-32399: Fixed a race condition when removing the...
SUSE-SU-2021:2003-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.11 bsc1186696 Security issues fixed: - CVE-2021-29964: Out of bounds-read when parsing a WMCOPYDATA message - CVE-2021-29967: Memory safety bugs fixed in Thunderbird 78.11 General improvements: - OpenPGP could n...
Nextcloud Trust Management Issues Vulnerability (CNVD-2021-42394)
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud, which stems from the vulnerability of the Nextcloud desktop client prior to 3.3.1 to incorrect certificate...
Security Bulletin: Streams service for IBM Cloud Pak for Data might be affected by some underlying WebSphere Liberty vulnerabilities
Summary Streams service for IBM Cloud Pak for Data might be affected by some underlying WebSphere Liberty vulnerabilities Vulnerability Details CVEID: CVE-2021-20492 DESCRIPTION: IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injecti...
Security Bulletin: Streams service for IBM Cloud Pak for Data might be affected by some underlying Python vulnerabilities
Summary Streams service for IBM Cloud Pak for Data might be affected by some underlying Python vulnerabilities Vulnerability Details CVEID: CVE-2020-8492 DESCRIPTION: Python is vulnerable to a denial of service, caused by a flaw in the urllib.request.AbstractBasicAuthHandler. By sending a special...
[ASA-202106-31] chromium: multiple issues
Arch Linux Security Advisory ASA-202106-31 ========================================== Severity: Critical Date : 2021-06-15 CVE-ID : CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552 CVE-2021-30553 Package :...
[ASA-202106-34] intel-ucode: multiple issues
Arch Linux Security Advisory ASA-202106-34 ========================================== Severity: High Date : 2021-06-15 CVE-ID : CVE-2020-24511 CVE-2020-24512 CVE-2020-24513 CVE-2021-24489 Package : intel-ucode Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-2051 Summa...
MGASA-2021-0257 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.10.43 and fixes at least the following security issues: The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting to a...
