OPENSUSE-SU-2021:1513-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.6.8: Improving reporting of general overload state for DNS timeout errors by relays Regenerate fallback directories for October 2021 Bug fixes for onion services CVE-2021-22929: do not log v2 onion services access attempt warnings on disk...

Security update for tor (moderate)

openSUSE Security Update: Security update for tor Announcement ID: openSUSE-SU-2021:1513-1 Rating: moderate References: 1192658 Cross-References: CVE-2021-22929 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description...

CVE-2019-5640: Exposure of Sensitive Information to an Unauthorized Actor

Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available in the last webpage visited by previous...

PT-2021-9120 · Rapid7 · Rapid7 Nexpose

Name of the Vulnerable Software and Affected Versions: Rapid7 Nexpose versions prior to 6.6.114 Description: The issue allows an attacker to expose information when a user's session has ended due to inactivity. By using the inspect element browser feature, an attacker can remove the login panel a...

UVI-2021-1002148 drm/msm: Avoid potential overflow in timeout_to_jiffies()

drm/msm: Avoid potential overflow in timeouttojiffies This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

PT-2021-30613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15 Description The issue concerns a potential overflow in the timeout to jiffies function. It was introduced in version v5.6 and fixed in version v5.15. The actual impact and attack plausibility have not y...

PT-2021-26550

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue concerns a potential overflow in the timeout to jiffies function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26618

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15 Description The issue concerns a potential overflow in the timeout to jiffies function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.6...

PT-2021-30493

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description The issue concerns a potential overflow in the timeout to jiffies function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-26498

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.75 Description The issue concerns a potential overflow in the timeout to jiffies function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2021-30545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description The issue concerns a potential overflow in the timeout to jiffies function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

fastjson2:JsonFuzzer: Timeout in JsonFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6535352626577408 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: JsonFuzzer Sanitizer: address ASAN Recommend...

Mozilla Firefox Security Advisory (MFSA2014-03) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

json-java:JsonJavaFuzzer: Timeout in JsonJavaFuzzer

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=5371111244693504 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Cra...

[SECURITY] Fedora 35 Update: watchdog-5.16-2.fc35

The watchdog program can be used as a powerful software watchdog daemon or may be alternately used with a hardware watchdog device such as the IPMI hardware watchdog driver interface to a resident Baseboard Management Controller BMC. watchdog periodically writes to /dev/watchdog; the interval...

CVE-2021-20324

A flaw was found in WildFly Elytron. A variation to the use of a session fixation exploit when using Undertow was found despite Undertow switching the session ID after authentication. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation This attack is...

Wordpress Plugin Catch Themes Demo Import RCE

The Wordpress Plugin Catch Themes Demo Import versions use exploit/multi/http/wp/catchthemesdemoimport msf undefinedcatchthemesdemoimport show actions ...actions... msf undefinedcatchthemesdemoimport set ACTION msf undefinedcatchthemesdemoimport show options ...show and set options... msf...

CVE-2021-21797

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lea...

CVE-2021-21797

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lea...

CVE-2021-21797

An exploitable double-free vulnerability exists in the JavaScript implementation of Nitro Pro PDF. A specially crafted document can cause a reference to a timeout object to be stored in two different places. When closed, the document will result in the reference being released twice. This can lea...