CVE-2021-35618: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where th...

CVE-2021-35621: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

PT-2021-20994

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

PT-2021-20996

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attacker with access to the physical communication...

CVE-2021-35593: Out-of-bounds Write

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

PT-2021-21019

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

CVE-2021-35594: Improper Validation of Array Index

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

PT-2021-21004

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CS SA Integration Pack versions 9.0 and 9.2 Description: The issue allows a low-privileged attacker with access to the physical communication segment to compromise the PeopleSoft Enterprise CS SA Integration Pack,...

PT-2021-20998

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

PT-2021-20997

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.33 and prior Oracle MySQL Cluster versions 7.5.23 and prior Oracle MySQL Cluster versions 7.6.19 and prior Oracle MySQL Cluster versions 8.0.26 and prior Description: The issue allows a high-privileged attack...

PT-2021-21016

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions prior to 8.0.26 Description: The issue allows a high-privileged attacker with access to the physical communication segment to compromise MySQL Cluster. This requires human interaction from a person other than the attack...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:1365-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3447-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1173746 1176940 1184439 1184804 1185302 1185677 1185726 1185762 1187167 1188067 1188651 1188986 1189297...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:3338-1 Rating: important References: 1065729 1148868 1152489 1154353 1159886 1167773 1170774 1171688 1173746 1174003 1176447 1176940 1177028 1178134 1184439 1184804 1185302 1185550 1185677 1185726...

CVE-2021-34758

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service DoS condition. This vulnerability is due to insufficient...

mysql-server:fuzz_initfile: Heap-use-after-free in Segment::write

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5182808746754048 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash...

sgxwallet buffer overflow vulnerability

Sgxwallet is an open source high-performance hardware-secure cryptographic wallet based on Intel Sgx technology. SKALE sgxwallet suffers from a buffer overflow vulnerability that can be exploited by attackers to cause segment errors and compromised security zones...

CVE-2021-32833

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are...

Unitrends Backup Remote Code Execution Vulnerability (CNVD-2021-95950)

Unitrends Backup is a set of data protection software from Unitrends, Inc. in the United States. The software provides data backup, data recovery and deduplication features. A remote code execution vulnerability exists in Unitrends Backup versions prior to 10.5.5-2, which can be exploited by an...

The vulnerability of the DVMRP (Distance Vector Multicast Routing Protocol) implementation in Juniper Networks’ Junos OS-based QFX10K routers allows a attacker to cause service interruptions.

The vulnerability of the DVMRP Distance Vector Multicast Routing Protocol implementation in Juniper Networks’ Junos OS-based QFX10K routers stems from packet looping due to incorrect comparison of Ethernet segment identifiers. Exploiting this vulnerability can allow a malicious actor to cause...