12612 matches found
PT-2021-7435 · Nginx · Nginx Controller
Name of the Vulnerable Software and Affected Versions: NGINX Controller versions 2.0.0 through 2.9.0 NGINX Controller versions 3.x before 3.15.0 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to disclose protected information...
SUSE-SU-2021:1809-1 Security update for curl
This update for curl fixes the following issues: - CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials bsc1183933. - CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. - Fix for SFTP uploads when it results in empty uploaded files bsc1177976. -...
OPENSUSE-SU-2021:0808-1 Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. - Allow partial chain verification jscSLE-17956 Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...
USN-4969-2 isc-dhcp vulnerability
USN-4969-1 fixed a vulnerability in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly handled lease file parsing. A remote attacker could possibly use this issue...
HPESBGN04151 rev.1 - HPE OneView for VMware vCenter, Remote Cross-Site Scripting
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - Prior to 10.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26584 |...
PT-2021-15259 · Unknown · Rocket.Chat
Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 3.13 Rocket.Chat version 3.12.2 Rocket.Chat version 3.11.3 Description: An information disclosure issue exists in the Rocket.Chat server that allows email addresses to be disclosed through enumeration and...
Zettlr vulnerable to cross-site scripting
Overview Zettlr provided by Hendrik Erz is a Markdown editor. Zettlr contains a cross-site scripting vulnerability CWE-79. Eiji Mori of flatt security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If ...
PT-2021-3340 · 3S Smart Software Solutions · Codesys V2 Runtime System
Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue arises from the improper neutralization of special elements used in an OS command, potentially allowing an attacker to impact the confidentiality, integrity, and...
Redirect URL matching ignores character casing
Impact Before version v0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match: 1. Registering a client with allowed redirect URL...
PT-2021-18150 · Arm · Arm Mali Gpu Kernel Driver
Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Bifrost r16p0 through r29p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r29p0 Arm Mali GPU Kernel Driver versions Midgard r28p0 through r30p0 Description: The issue allows an unprivileged user...
QND vulnerable to privilege escalation
Overview QND provided by QualitySoft Corporation contains a privilege escalation vulnerability CWE-268. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. RedTeam reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
PT-2021-17923 · Qnap · Qnap Nas +2
Name of the Vulnerable Software and Affected Versions: QNAP NAS versions prior to QTS 4.5.2.1630 Build 20210406 QNAP NAS versions prior to QTS 4.3.6.1663 Build 20210504 QNAP NAS versions prior to QTS 4.3.3.1624 Build 20210416 QuTS hero versions prior to h4.5.2.1638 Build 20210414 Description: A...
Security Advisory - Denial of Service Vulnerability in Huawei Smartphone
There is a denial of service vulnerability in Huawei smartphone. A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service condition. Vulnerability ID: HWPSIRT-2020-05281 This vulnerability has been assigned a Comm...
ALSA-2021:1879 Moderate: python38:3.8 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
ALBA-2021:1808 clevis bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALBA-2021:1802 gnome-bluetooth bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALBA-2021:1719 ledmon bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
ALBA-2021:1708 kmod bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...