13244 matches found
netty: Information disclosure via the local system temporary directory
In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...
3.6 bug fix and enhancement update
An update is available for apache-commons-io, atinject, jsr-305, maven-shared-utils, plexus-cipher, aopalliance, plexus-classworlds, guava, apache-commons-cli, plexus-containers, plexus-sec-dispatcher, httpcomponents-client, maven-resolver, apache-commons-lang3, plexus-interpolation, sisu,...
openSUSE Security Update : virtualbox (openSUSE-2021-630)
This update for virtualbox fixes the following issues : - Version bump to 6.1.20 released April 20 2021 by Oracle Fixes boo1183329 'virtualbox 6.1.18 crashes when it runs nested VM' Fixes boo1183125 'Leap 15.3 installation in Virtualbox without VBox integration' Fixes CVE-2021-2264 and boo1184542...
openSUSE Security Update : qemu (openSUSE-2021-600)
This update for qemu fixes the following issues : - CVE-2020-12829: Fix OOB access in sm501 device emulation bsc1172385 - CVE-2020-25723: Fix use-after-free in usb xhci packet handling bsc1178934 - CVE-2020-25084: Fix use-after-free in usb ehci packet handling bsc1176673 - CVE-2020-25625: Fix...
Ubuntu 18.04 LTS / 20.04 LTS : Intel Microcode vulnerabilities (USN-4628-3)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4628-3 advisory. USN-4628-1 provided updated Intel Processor Microcode for various processor types. This update provides the corresponding updates for some...
CVE-2021-29041
Denial-of-service DoS vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by 1 enabling Time-based One-time password TOTP on behalf of the other user or 2 modifying the other...
CVE-2020-27150
In multiple versions of NPort IA5000A Series, the result of exporting a deviceâs configuration contains the passwords of all users on the system and other sensitive data in the original form if âPre-shared keyâ doesnât set...
CVE-2020-27150
In multiple versions of NPort IA5000A Series, the result of exporting a deviceâs configuration contains the passwords of all users on the system and other sensitive data in the original form if âPre-shared keyâ doesnât set...
CVE-2020-27150: Undefined Security Weakness
In multiple versions of NPort IA5000A Series, the result of exporting a deviceâs configuration contains the passwords of all users on the system and other sensitive data in the original form if âPre-shared keyâ doesnât set...
The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.
The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...
May 11, 2021âKB5003203 (Security-only update)
None None...
May 11, 2021âKB5003228 (Security-only update)
None None...
May 11, 2021âKB5003208 (Monthly Rollup)
None None...
Description of the security update for SharePoint Server 2019: May 11, 2021 (KB5001916)
None None...
GHSA-23X4-M842-FMWF Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This...
GHSA-QCG2-H349-VWM3 Cross-site Scripting in React Draft Wysiwyg
react-draft-wysiwyg aka React Draft Wysiwyg before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS...
Cross-site Scripting in React Draft Wysiwyg
react-draft-wysiwyg aka React Draft Wysiwyg before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS...
The vulnerability of the Thunderbird email client, caused by synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.
The vulnerability of the Thunderbird email client arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...