Denial of service

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

CVE-2021-21529

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

CVE-2021-21529

Dell DSU (Dell System Update) version 1.9 and earlier is affected by a local DoS vulnerability where a low-privileged, authenticated user can spawn multiple instances of the vulnerable DSU process, exhausting system memory. The issue is documented under CVE-2021-21529 with CVSS metrics indicating...

Dell System Update 资源管理错误漏洞

Dell System Update is an application package from Dell, Inc. that provides application updates. Dell System Update DSU 1.9 and earlier versions contain a security vulnerability that could be exploited by an attacker with low privileged local authentication to run multiple instances of the...

New Android malware poses as “System Update” to steal your data

By Deeba Ahmed The malware is also capable of controlling the device's front and back camera to take photos periodically. This is a post from HackRead.com Read the original post: New Android malware poses as "System Update" to steal your data...

Watch Out! That Android System Update May Contain A Powerful Spyware

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware on Android has previously taken the guise of copycat apps, which go...

SUSE-SU-2021:0840-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2446 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check bsc1179664. -...

Important: kernel-livepatch-4.14.209-160.335

Issue Overview: A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity ...

Servicing stack update for Windows 10, version 1809: January 12, 2021

None None...

Medium: kernel-livepatch-4.14.198-152.320

Issue Overview: A flaw was found in the capabilities check of the rados block device functionality in the Linux kernel. Incorrect capability checks could alllow a local user with root priviledges but no capabilities to add or remove Rados Block Devices from the system. CVE-2020-25284 Affected...

Medium: libxslt

Issue Overview: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded. CVE-2019-110...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Sql injection

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user session identifiers were stored in cleartext - without processing with additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in...

Medium: postgresql94

Issue Overview: A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function. CVE-2019-10208 Affected Packages: postgresql...

Lenovo System Update Competitive Conditions Vulnerability (CNVD-2020-52390)

Lenovo System Update is an application from the Chinese company Lenovo Lenovo for checking for driver updates and installing them. A security vulnerability exists in Lenovo System Update versions prior to 5.07.0106. An attacker could exploit the vulnerability to privilege an upgrade...

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

Race condition

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...

CVE-2020-8342

CVE-2020-8342 impacts Lenovo System Update prior to version 5.07.0106, describing a race condition that could allow privilege escalation. Lenovo’s Lenovo PS500347 advisory and CNVD/NVD entries align on the same vulnerability and provide a remediation: upgrade to 5.07.0106 or newer. Other connecte...

CVE-2020-8342

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege...