12612 matches found
DSA-4850-1 libzstd - security update
Bulletin has no description...
2021-02 Dynamic Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4601315)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
PT-2021-2143 · Adobe · Photoshop
Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 21.2.4 and earlier Adobe Photoshop versions 22.1.1 and earlier Description: The issue is related to a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage...
Intel® Collaboration Suite for WebRTC Advisory
Summary: A potential security vulnerability in the Intel® Collaboration Suite for WebRTC may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12339 Description: Insufficient control flow management ...
HPSBHF03719 rev. 3 - Intel® Graphics Drivers February 2021 Security Update
Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerabilities identified in some Intel® Graphics Drivers whi...
PT-2021-2312 · Adobe · Acrobat Reader
Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 2020.013.20074 and earlier Adobe Acrobat Reader DC versions 2020.001.30018 and earlier Adobe Acrobat Reader DC versions 2017.011.30188 and earlier Description: The issue is related to a memory corruption...
OPENSUSE-SU-2021:0237-1 Security update for rubygem-nokogiri
This update for rubygem-nokogiri fixes the following issues: rubygem-nokogiri was updated to 1.8.5 bsc1156722. Security issues fixed: - CVE-2019-5477: Fixed a command injection vulnerability bsc1146578. - CVE-2020-26247: Fixed an XXE vulnerability in Nokogiri::XML::Schema bsc1180507. This update...
Fixed in Apache Tomcat 7.0.108
Low: Fix forCVE-2020-9484 was incomplete CVE-2021-25329 The fix for CVE-2020-9484 was incomplete. When using a highly unlikely configuration edge case, the Tomcat instance was still vulnerable to CVE-2020-9484. Note that both the previously published prerequisites for CVE-2020-9484 and the...
Trend Micro HouseCall for Home Networks (Windows Edition) may insecurely load Dynamic Link Libraries
Overview HouseCall for Home Networks Windows Edition provided by Trend Micro Incorporated contains an issue with the DLL search path. By reading a malicious DLL placed in the folder specified by the PATH environment variable, arbitrary code with an escalated privilege may be executed CWE-427. Tre...
Panasonic Video Insight VMS vulnerable to arbitrary code execution
Overview Video Insight VMS provided by Panasonic Corporation contains an arbitrary code execution vulnerability CWE-94 because unencrypted communication exists in the communication using non-well known ports. Panasonic Corporation reported this vulnerability to JPCERT/CC to notify users of its...
JVN#42252698: Panasonic Video Insight VMS vulnerable to arbitrary code execution
Video Insight VMS provided by Panasonic Corporation contains an arbitrary code execution vulnerability CWE-94 because unencrypted communication exists in the communication using non-well known ports. Impact By sending a specially crafted request to the vulnerable product, a remoto attacker may...
SUSE-SU-2021:0297-1 Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.8.10 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 A lot more minor bugs have been fixed with this openvswitch version. Please refer to the changelog of the openvswitch.rpm file in...
Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Privilege Escalation Vulnerability
A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images could allow an authenticated, local attacker to elevate their privilege to root. To exploit this vulnerability, an attacker...
Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability
A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...
Cisco IOS XR Software IPv6 Flood Denial of Service Vulnerability
A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause an IPv6 flood on the management interface network of an affected device. The vulnerability exists because the software incorrectly forward...
Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability
A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...
PT-2021-11105 · Qnap Systems · Qnap Helpdesk
Name of the Vulnerable Software and Affected Versions: QNAP Systems Inc. Helpdesk versions prior to 3.0.3 Description: The issue is related to improper access control, which could allow attackers to compromise the security of the software by gaining privileges or reading sensitive information. If...
PT-2021-1915 · Cisco · Cisco Nx-Os +2
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Cisco NX-OS Software affected versions not specified Description: A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices...
SUSE-SU-2021:0277-1 Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.11.5 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345...