255 matches found
[SECURITY] [DLA 3192-1] lava security update
Debian LTS Advisory DLA-3192-1 [email protected] https://www.debian.org/lts/security/ Dominik George November 17, 2022 https://wiki.debian.org/LTS Package : lava Version : 2019.01-5+deb10u1 CVE ID : CVE-2022-42902 Debian Bug : 1021737 It was discovered that lavaserver allowed remote cod...
rpm bug fix and enhancement update
An update is available for rpm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The RPM Package Manager RPM is a command-line driven package management system...
rpm bug fix and enhancement update
An update is available for rpm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The RPM Package Manager RPM is a command-line driven package management system...
[SECURITY] [DSA 5261-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5261-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 26, 2022 https://www.debian.org/security/faq -...
Security Bulletin: Information disclosure vulnerability affect IBM Business Automation Workflow - CVE-2022-35279
Summary IBM Business Automation Workflow is vulnerable to an information disclosure attack. Vulnerability Details CVEID:CVE-2022-35279 DESCRIPTION: IBM Business Automation Workflow could disclose sensitive version information to authenticated users which could be used in further attacks against t...
CVE-2022-2785 Arbitrary Memory read in BPF Linux Kernel
There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...
FreeBSD-SA-22:11.vm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:11.vm Security Advisory The FreeBSD Project Topic: Memory disclosure by stale virtual memory mapping Category: core Module: vm Announced: 2022-08-09 Credits:...
Design/Logic Flaw
A vulnerability in the software upgrade process of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to write arbitrary files on the affected system. This vulnerability i...
CVE-2022-24861 Remote Code Execution in Databasir
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to...
CVE-2021-40045
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2021-40045
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2021-40045
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality...
Privilege escalation
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2021-40045
There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2021-40045
CVE-2021-40045 concerns Huawei HarmonyOS (Wearables recovery upgrade system) where the signature verification mechanism can fail during system upgrade in recovery mode. The underlying vulnerability is a signature verification failure that can affect confidentiality of service. The NVD entry notes...
CVE-2022-21672
The CVE-2022-21672 issue affects the make-ca utility (versions
Simplified Steps for Reverse Imaging PVS vDisk to Citrix Hypervisor VM
In order to accomplish some upgrades, you need to boot to the “hard drive” instead of the network. Some of the cases where booting to the hard drive are required: Uninstall PVS agent to upgrade Uninstall the Network Adapter to replace or upgrade Uninstall the Citrix Hypervisor tools to upgrade...
Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices
On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post is intended to provide an update on our findings, give additional recommendations to network defenders, and discuss potential...
[SECURITY] [DLA 2517-1] dovecot security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2517-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 05, 2021 https://wiki.debian.org/LTS -...
Fedora 33 : 1:livecd-tools / createrepo_c / dnf-plugins-core / etc (2020-b40fc174b5)
createrepoc 0.16.1 - Update to 0.16.1 - Add the section number to the manual pages - Parse xml snippet in smaller parts RhBug:1859689 - Add module metadata support to createrepoc RhBug:1795936 librepo 1.12.1 - Update to 1.12.1 - Validate path read from repomd.xml RhBug:1868639 libdnf 0.54.2 -...