ASB-A-168051051

Bulletin has no description...

PT-2021-14061 · Mitsubishi · Gx Works3 +39

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric FA Engineering Software versions prior to the fixed version CPU Module Logging Configuration Tool versions 1.112R and prior CW Configurator versions 1.011M and prior Data Transfer versions 3.44W and prior EZSocket versions...

On Vulnerability-Adjacent Vulnerabilities

At the virtual Enigma Conference, Googles Project Zeros Maggie Stone gave a talk about zero-day exploits in the wild. In it, she talked about how often vendors fix vulnerabilities only to have the attackers tweak their exploits to work again. From a MIT Technology Review article: Soon after they...

ASB-A-172348733

Bulletin has no description...

EUVD-2021-6605

Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-1278

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service DoS attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-2122 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2065 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2060 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2046 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-2016 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2021-1998 vulnerabilities

Vulnerabilities for packages: mysql...

MGASA-2021-0045 Updated resource-agents packages fix security vulnerabilities

Multiple vulnerabilities related to unsafe tempfile usage bsc1146690, bsc1146691, bsc1146692, bsc1146766, bsc1146776, bsc1146784, bsc1146785, bsc1146787. Issues where the ocfmon user was created with a default password bsc1021689, bsc1146687. The resource-agents package has been updated to versio...

SUSE-SU-2021:0086-1 Security update for crmsh

This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999...

SUSE-SU-2021:0081-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2020-19667 bsc1179103: Stack buffer overflow in XPM coder could result in a crash...

SUSE-SU-2021:0028-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts bsc1174920. - CVE-2020-12673: Fixed an improper implementation of NTLM that did not check the message buffer size bsc1174922. -...

ASB-A-170139099

Bulletin has no description...

OPENSUSE-SU-2020:2360-1 Security update for opera

This update for opera fixes the following issues: - Update to version 73.0.3856.284 - CHR-8225 Update chromium on desktop-stable-87-3856 to 87.0.4280.88 - DNA-88454 Background of snap area above visible scrolled viewport is not captured - DNA-89749 Implement clientcapabilities support for Flow /...

CVE-2020-27134 Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...

Record Levels of Software Bugs Plague Short-Staffed IT Teams in 2020

2020 is shaping up to be a banner year for software vulnerabilities, leaving security professionals drowning in a veritable sea of patching, reporting and looming attacks, many of which they can’t even see. A trio of recent reports tracking software vulnerabilities over the past year underscore t...