OMEN Gaming Hub Escalation of Privilege and Denial of Service for Certain OMEN PCs

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs...

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details "details" section of this advisory. Cisco has...

ASB-A-189402477

Hackerone bug id11876671187670...

GHSA-X7VR-C387-8W57 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-7MG7-M5C3-3HQJ Data races in unicycle

Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...

CVE-2021-30951

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

OPENSUSE-SU-2021:2789-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufpalloc bsc1189145, CVE-2021-3682 - NULL pointer dereference in ESP bsc1180433, CVE-2020-35504 bsc1180434, CVE-2020-35505 bsc1180435, CVE-2020-35506 - NULL pointer dereference iss...

SUSE-SU-2021:2760-1 Security update for c-ares

This update for c-ares fixes the following issues: Version update to git snapshot 1.17.1+20200724: - CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers bsc1188881 - If aresgetaddrinfo was terminated by an aresdestroy, it would cause crash - Crash in sortaddrinfo if...

CVE-2021-38187 vulnerabilities

Vulnerabilities for packages: buck2...

SUSE-SU-2021:2605-1 Security update for mariadb

This update for mariadb fixes the following issues: - Update to 10.2.39 bsc1182739 - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. bsc1185870 - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. bsc1185872 - CVE-2021-27928: Fixed a remote code execution...

Top 30 Critical Security Vulnerabilities Most Exploited by Hackers

Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to swiftly weaponize publicly disclosed flaws to their advantage. "Cyber actors contin...

GHSA-C72P-9XMJ-RX3W vulnerabilities

Vulnerabilities for packages: ctop...

SUSE-SU-2021:2454-1 Security update for transfig

This update for transfig fixes the following issues: Update to version 3.2.8, including fixes for - CVE-2021-3561: overflow in fig2dev/read.c in function readcolordef bsc1186329. - CVE-2019-19797: out-of-bounds write in readcolordef in read.c bsc1159293. - CVE-2019-19555: stack-based buffer...

CVE-2021-2357 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2356 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2339 vulnerabilities

Vulnerabilities for packages: mysql...

2021 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2021 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability...

OPENSUSE-SU-2021:1942-1 Security update for qemu

This update for qemu fixes the following issues: - Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream bsc1181103 - Fix OOB access in sdhci interface CVE-2020-17380, bsc1175144, CVE-2020-25085, bsc1176681, CVE-2021-3409, bsc1182282 - Fix potential...

OPENSUSE-SU-2021:1845-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied o...

MGASA-2021-0305 Updated p7zip package fixes security vulnerabilities

In p7zip-17.03, the function NCompress::CCopyCoder::Code in CPP/7zip/Common/StreamObjects.cpp will call outStream-Write where a memcpy uses a NULL pointer as destination address, leading to a crash CVE-2021-3465. Null pointer dereference in function Reserve found in p7zip 16.02 rhbz1951218. Null...