NewStart CGSL MAIN 6.02 : tcpdump Multiple Vulnerabilities (NS-SA-2021-0082)

The remote NewStart CGSL host, running version MAIN 6.02, has tcpdump packages installed that are affected by multiple vulnerabilities: - The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmpprint. CVE-2018-14462 - The ICMPv6 parser in tcpdump before 4.9.3 has a buff...

OSV-2021-464 Heap-buffer-overflow in blosc_read_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31535 Crash type: Heap-buffer-overflow READ 16 Crash state: bloscreadheader blosc2cbuffersizes framegetlazychunk...

Veritas Backup Exec Agent Remote Code Execution

Veritas Backup Exec Agent supports multiple authentication schemes and SHA authentication is one of them. This authentication scheme is no longer used within Backup Exec versions, but hadn't yet been disabled. An attacker could remotely exploit the SHA authentication scheme to gain unauthorized...

CVE-2020-28587

creationtimestamp| type| source ---|---|--- 2021-02-23 22:35:16+00:00| seen| https://t.me/cibsecurity/24025...

Digium Asterisk Security Vulnerability

Digium Asterisk is a set of open source telephone exchange PBX system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR, and more. A security vulnerability exists in Digium Asterisk. The vulnerability stems from allowing a...

CVE-2020-24505

creationtimestamp| type| source ---|---|--- 2021-02-17 16:55:07+00:00| seen| https://t.me/cibsecurity/23735...

CVE-2021-27237

creationtimestamp| type| source ---|---|--- 2021-02-16 22:48:13+00:00| seen| https://t.me/cibsecurity/23680...

CVE-2021-20068

creationtimestamp| type| source ---|---|--- 2021-02-16 22:48:02+00:00| seen| https://t.me/cibsecurity/23672...

CVE-2021-27203

creationtimestamp| type| source ---|---|--- 2021-02-16 22:47:59+00:00| seen| https://t.me/cibsecurity/23669...

GHSA-3CRJ-W4F5-GWH4

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:54+00:00| seen| https://t.me/cibsecurity/23659...

CVE-2020-35558

creationtimestamp| type| source ---|---|--- 2021-02-16 18:48:16+00:00| seen| https://t.me/cibsecurity/23655...

CVE-2020-35560

creationtimestamp| type| source ---|---|--- 2021-02-16 18:48:01+00:00| seen| https://t.me/cibsecurity/23645...

CVE-2020-35570

creationtimestamp| type| source ---|---|--- 2021-02-16 18:48:00+00:00| seen| https://t.me/cibsecurity/23644...

CVE-2020-29023

creationtimestamp| type| source ---|---|--- 2021-02-16 18:47:58+00:00| seen| https://t.me/cibsecurity/23641...

CVE-2020-35567

creationtimestamp| type| source ---|---|--- 2021-02-16 18:47:53+00:00| seen| https://t.me/cibsecurity/23639...

CVE-2020-35564

creationtimestamp| type| source ---|---|--- 2021-02-16 18:47:52+00:00| seen| https://t.me/cibsecurity/23638...

CVE-2020-35566

creationtimestamp| type| source ---|---|--- 2021-02-16 18:47:51+00:00| seen| https://t.me/cibsecurity/23637...

CVE-2020-25340

creationtimestamp| type| source ---|---|--- 2021-02-16 18:47:50+00:00| seen| https://t.me/cibsecurity/23636...

CVE-2021-27229

creationtimestamp| type| source ---|---|--- 2021-02-16 07:47:17+00:00| seen| https://t.me/cibsecurity/23622...

Path traversal

A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions...