VMware NSX-T 权限许可和访问控制问题漏洞

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

PT-2021-2864 · Vmware · Vmware Nsx-T

Name of the Vulnerable Software and Affected Versions: VMware NSX-T affected versions not specified Description: The issue is related to the implementation of Role Based Access Control RBAC in VMware NSX-T, specifically concerning insecure privilege management. This could allow a remote attacker ...

VMSA-2021-0006:VMware NSX-T updates address a privilege escalation vulnerability

Advisory ID: VMSA-2021-0006 CVSSv3 Range: 7.5 Issue Date:2021-04-19 Updated On: 2021-04-19 Initial Advisory CVEs: CVE-2021-21981 Synopsis: VMware NSX-T updates address a privilege escalation vulnerability CVE-2021-21981 RSS Feed Download PDF Download Text File Share this page on social media: 1...

CVE-2021-29931

The CVE concerns the arenavec crate for Rust (up to at least 0.1.1 per OSV entry; affecters mention Rust versions up to 2021-01-12). Root cause: panics in T::drop() (and related paths) can cause double drop or memory management issues, leading to memory corruption. Documented impacts include doub...

CVE-2021-29931

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

CVE-2021-29931: Double Free

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

CVE-2020-24550

An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacker to redirect users to untrusted websites via the tredirect parameter in a crafted URL, such as a /findv2/click URL...

Weak Password Vulnerability in TL-WR841HP of P&L Technology Ltd.

The TL-WR841HP is a 300Mbps, high power wireless router. A weak password vulnerability exists in the P&T TL-WR841HP, which can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in Chase T Series Ledger System

Ltd. is a member company of UFIDA. Changjitong is committed to providing social, personalized, service-oriented and small business management support for small and medium-sized enterprises. A command execution vulnerability exists in the Changjitong T-Series Ledger System. An attacker can exploit...

Asterisk DoS Vulnerability (AST-2021-006)

Asterisk is prone to a denial of service vulnerability when negotiating T.38 with a zero port. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RUSTSEC-2021-0053 'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

FreeBSD : asterisk -- Crash when negotiating T.38 with a zero port (9e8f0766-7d21-11eb-a2be-001999f8d30b)

The Asterisk project reports : When Asterisk sends a re-invite initiating T.38 faxing and the endpoint responds with a m=image line and zero port, a crash will occur in Asterisk. This is a reoccurrence of AST-2019-004. C Tenable Network Security, Inc. The descriptive text and package checks in th...

RUSTSEC-2021-0036 Intern<T>: Data race allowed on T

Affected versions of this crate unconditionally implements Sync for Intern. This allows users to create data race on T: !Sync, which may lead to undefined behavior for example, memory corruption. The flaw was corrected in commit 2928a87 by adding the trait bound T: Sync in the Sync impl of Intern...

Advantech BB-ESWGP506-2SFP-T Hardcoded Vulnerability

The Advantech BB-ESWGP506-2SFP-T is an application from CHAAdvantech that provides an intelligent electric bus management system. A hard-coded vulnerability in the Advantech BB-ESWGP506-2SFP-T allows remote attackers to exploit the vulnerability to submit a special request, gain unauthorized acce...

CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

Hardcoded credentials

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

CVE-2021-22667 affects Advantech BB-ESWGP506-2SFP-T industrial switches (versions 1.01.09 and prior). The root cause is hard-coded credentials in the device, enabling unauthorized access and arbitrary code execution. ZDI specifies exploitation via the telnet service (port 23) with a hard-coded ad...

Denial Of Service (DoS)

asterisk is vulnerable to denial of service. When re-negotiating for T.38, if the initial remote response was delayed by a specific duration, both audio and T.38 in the SDP would be sent and the subsequent response from the receiver would crash the application...