Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0, which stems from a samba server boundary overflow vulnerability in the system file management module...

Virtuozzo Hybrid Infrastructure 4.7 Update 1.2

This update provides a stability fix for the metadata service. Vulnerability id: VSTOR-49572 A stability fix for the metadata service...

Virtuozzo Hybrid Infrastructure 4.7 Update 1.1

This update provides stability fixes. Vulnerability id: VSTOR-49253 Cannot deploy the compute cluster with a flat physical network if the untagged network interface has VLAN interfaces. Vulnerability id: VSTOR-49207 A vGPU may disconnect from a virtual machine after the VM shutdown and start...

ManageEngine ServiceDesk Plus Remote Code Execution Exploit

This Metasploit module exploits CVE-2021-44077, an unauthenticated remote code execution vulnerability in ManageEngine ServiceDesk Plus, to upload an EXE msiexec.exe and execute it as the SYSTEM account. Note that build 11305 is vulnerable to the authentication bypass but not the file upload. The...

Virtuozzo ReadyKernel patch 137.1 for Virtuozzo Hybrid Server 7.0, 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x. Vulnerability id: PSBM-136295 3.10.0-1127.8.2.vz7.151.14 to 3.10.0-1160.41.1.vz7.183.5 fs/locks.c: Node crash BUG in locksinsertblock...

CVE-2021-24818 WP Limits <= 1.0 - Plugin's Settings Update via CSRF

The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values...

Microsoft Office Word MSHTML Remote Code Execution Exploit

This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering...

Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 2 (7.5.2-464)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 2 provides stability and usability bug fixes. Vulnerability id: PSBM-136189 QEMU could mark a VM QCOW2 image as corrupt. Vulnerability id: PSBM-136198 QEMU could not be updated. Vulnerability id: PSBM-136407 VCMMD needed to be properly notified ...

Virtuozzo PowerPanel Update 2 (7.0.4-75)

The update for Virtuozzo PowerPanel introduces new features as well as a stability and usability fix. Vulnerability id: PP-664 Wrong VA agent version could be displayed after an update...

Virtuozzo Hybrid Infrastructure 4.7 Update 1

This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-48360 Fixed the false-positive alert "MN backup does not exist." Vulnerability id: VSTOR-48337 After a power failure of all nodes in the high availability cluster, the virtual IP address may be unset...

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:3844-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3844-1 advisory. - In ImfChromaticities.cpp routine RGBtoXYZ, there are some division operations such as float Z = 1 - chroma.white.x - chroma.white.y Y /...

SUSE SLED12: libIlmImf-Imf_2_1-21 / libIlmImf-Imf_2_1-21-32bit / openexr / etc (SUSE-SU-2021:3843-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3843-1 advisory. - CVE-2021-3477: Fixed Heap-buffer-overflow in Imf25::DeepTiledInputFile::readPixelSampleCounts bsc1184353. - CVE-2021-394...

Kernel update: Virtuozzo ReadyKernel patch 136.0 for Virtuozzo Hybrid Server 7.0, 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7. Vulnerability id: PSBM-134905 3.10.0-1062.12.1.vz7.131.10 to 3.10.0-1160.41.1.vz7.183.5 nfsd: memory corruption and kernel crash in nfsd4lock. It w...

Virtuozzo ReadyKernel patch 135.0 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernels 3.10.0-1160.21.1.vz7.174.13 Virtuozzo Hybrid Server 7.5 Update 1, 3.10.0-1160.41.1.vz7.183.5 Virtuozzo Hybrid Server 7.5 Update 2. Vulnerability id: PSBM-131551 3.10.0-1160.21.1.vz7.174.1...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2021:3745-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:3745-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to Extended Support Release 91.3.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2021-49 bsc1192250 CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets CVE-2021-38504:...

SUSE-SU-2021:3721-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to Extended Support Release 91.3.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2021-49 bsc1192250 CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets CVE-2021-38504:...

CVE-2021-0157

A vulnerability was reported in the BIOS firmware for some IntelR Processors caused by insufficient control flow management. This flaw allows a user with local access to cause the device to elevate privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as...

Mozilla Firefox Security Advisory (MFSA2015-10) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Congress Mulls Banning Big Ransomware Payouts

A U.S. lawmaker has introduced a bill – the Ransomware and Financial Stability Act H.R.5936 PDF – that would make it illegal for financial firms to pay ransoms over $100,000 without first getting the government’s permission. The legislation was introduced on Wednesday by the top Republican on the...