PT-2021-7932 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.2 Description: The issue is related to the mishandling of a pushdown from a HAVING clause to a WHERE clause, which can cause an application crash. This can be exploited by an attacker to disrupt service...

Security Advisory - Logic Vulnerability in Huawei WATCH Kid Product

There is a logic vulnerability in Huawei WATCH Kid product. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target devic...

CVE-2021-32699

Wings (Pterodactyl Wings) pre-1.4.4 is affected by a resource-exhaustion vulnerability caused by improper container process limits. A malicious user can exhaust host resources, impacting other clients and potentially taking the physical server offline. Mitigation per multiple sources: upgrade to ...

Update of kernel-debug-devel, kernel-devel, python-perf, kernel-debug, perf, kernel, kernel-debug-devel, kernel-headers

...

Inkdrop vulnerable to OS command injection

Overview Inkdrop provided by Takuya Matsuyama is a Markdown editor. Inkdrop contains an OS command injection vulnerability CWE-78. Eiji Mori of Flatt Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

SUSE-SU-2021:2102-1 Security update for Salt

This update fixes the following issues: salt: - Parsing Epoch out of version provided during pkg remove bsc1173692 - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module bsc1185281 CVE-2021-31607 - Transactionalupdate: detect recursion in the...

OPENSUSE-SU-2021:0898-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 91.0.4472.114 boo1187481 CVE-2021-30554: Use after free in WebGL CVE-2021-30555: Use after free in Sharing CVE-2021-30556: Use after free in WebAudio CVE-2021-30557: Use after free in TabGroups Chromium 91.0.4472.106 Fix use-after-free...

JVN#21298724: Hitachi Virtual File Platform vulnerable to OS command injection

Hitachi Virtual File Platform provided by Hitachi contains an OS command injection vulnerability CWE-78 due to a flaw in processing parameters of the HTTP requests. Impact A remote attacker who can log in to the product may execute an arbitrary OS command with root privilege. Solution Update the...

Hitachi Application Server Help vulnerable cross-site scripting

Overview Hitachi Application Server Help contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrar...

JVN#03776901: Hitachi Application Server Help vulnerable cross-site scripting

Hitachi Application Server Help contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the appropriate latest version of the help according to the information provided by the developer. Product...

PT-2021-12729 · Citrix · Citrix Netscaler Gateway +1

Name of the Vulnerable Software and Affected Versions: Citrix ADC and Citrix/NetScaler Gateway versions prior to 13.0-82.41 Citrix ADC and Citrix/NetScaler Gateway versions prior to 12.1-62.23 Citrix ADC and Citrix/NetScaler Gateway versions prior to 11.1-65.20 Citrix ADC 12.1-FIPS versions prior...

PT-2021-17936 · Qnap Systems · Qnap Helpdesk +1

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.4 Description: An improper access control issue has been reported, affecting QNAP NAS. This issue allows remote attackers to compromise the security of the software. Recommendations: For versio...

PT-2021-17929 · Qnap Systems · Qsw-M408 +3

Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2S QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C QNAP Syste...

PT-2021-16578 · Unknown · Libsflacextractor

Name of the Vulnerable Software and Affected Versions: libsflacextractor library prior to SMR MAY-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the sflacfd get frm function. This vulnerability allows attackers to execute arbitrary code on the...

SUSE-SU-2021:1952-1 Security update for csync2

This update for csync2 fixes the following issues: - CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS bsc1147137 - CVE-2019-15523: Fixed an incorrect TLS handshake error handling bsc1147139...

DLA-2684-1 lasso - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2014:1178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0231 Updated dnsmasq packages fix a security vulnerability

A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ...

CVE-2021-22549

An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c...