UBUNTU-CVE-2021-44922

A null pointer dereference vulnerability exists in gpac 1.1.0 in the BDCheckSFTimeOffset function, which causes a segmentation fault and application crash...

CVE-2021-43608

Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input to the DBAL QueryBuilder or any other A...

UBUNTU-CVE-2021-43608

Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input to the DBAL QueryBuilder or any other A...

CVE-2021-24847

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is...

Sql injection

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin i...

CVE-2021-24847: Improper Neutralization of Special Elements used in an SQL Command

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is...

PT-2021-16328

Name of the Vulnerable Software and Affected Versions: SEO Redirection Plugin – 301 Redirect Manager WordPress plugin versions prior to 8.2 Description: The importFromRedirection AJAX action does not properly sanitise the offset parameter before using it in a SQL statement, leading to an SQL...

WordPress SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin SEO Redirection prior to version 8.2. T...

GSD-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002202 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

GSD-2021-1002133 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

UVI-2021-1002067 nvme-tcp: fix possible req->offset corruption

nvme-tcp: fix possible req-offset corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.77 by commit...

PT-2021-26672

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.15 Description: A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-30532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.76 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.76 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.15 Description The issue is related to a possible corruption of the req-offset in nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5....

PT-2021-30598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.14.15 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.14.15 Description A potential issue exists in the nvme-tcp component, which may lead to req-offset corruption. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

RHEL 8 : python-pillow (RHSA-2021:4149)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4149 advisory. The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal...

CentOS 8 : python-pillow (CESA-2021:4149)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4149 advisory. - python-pillow: Buffer over-read in PCX image reader CVE-2020-35653 - python-pillow: Buffer over-read in SGI RLE image reader CVE-2020-35655 -...