Heap overflow

LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in doprintex called from asn1itemprintctx and ASN1itemprint...

LibreSSL 缓冲区错误漏洞

LibreSSL is an open source implementation of the Secure Sockets Layer and Transport Layer security protocols. A security vulnerability exists in LibreSSL that stems from LibreSSL 2.9.1 through 3.2.1 having an out-of-bounds read in asn1itemprintctx called from asn1templateprintctx. No details of t...

LibreSSL 缓冲区错误漏洞

LibreSSL is an open source implementation of the Secure Sockets Layer and Transport Layer security protocols. A security vulnerability exists in LibreSSL versions 2.9.1 through 3.2.1 that stems from the presence of a heap-based buffer overflow in LibreSSL. No details of the vulnerability are...

Cisco Common Services Platform Collector 操作系统命令注入漏洞

The Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on a network. A command injection vulnerability exists in the configuration dashboard of Cisco Common Services Platform Collector versions prior to 2.9.1. T...

OpenSSH <= 2.9 Security Vulnerability

When OpenSSH is used in an environment using PAM, it may be possible for local users to evade restrictions enforced by PAM modules such as rlimits. A PAM session is not initiated by OpenSSH when commands are executed in an Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be...

EulerOS Virtualization 2.9.1 : open-iscsi (EulerOS-SA-2021-1718)

According to the version of the open-iscsi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-1590)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for lldpad (EulerOS-SA-2021-1611)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for open-iscsi (EulerOS-SA-2021-1617)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2021-1619)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as...

EulerOS Virtualization 2.9.1 : cups (EulerOS-SA-2021-1595)

According to the version of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - This update for cups fixes the following issues: - CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption bsc1168422.CVE-2020-389...

DEBIAN-CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

UBUNTU-CVE-2021-27799

eanleadingzeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code...

Debian DSA-4777-1 : freetype - security update

Sergei Glazunov discovered a heap-based buffer overflow vulnerability in the handling of embedded PNG bitmaps in FreeType. Opening malformed fonts may result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Beijing Kuangshi Technology MEGVII Koala Access Control Error Vulnerability

Beijing Kuangshi Technology MEGVII Koala is a set of intelligent real estate solutions dedicated to commercial real estate scenarios from Beijing Kuangshi Technology, which provides front-end image acquisition units, people access management, video surveillance and other functions. A security...

Authentication flaw

Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000...

GHSA-WVH7-5P38-2QFC Storing Password in Local Storage

The setPassword method http://parseplatform.org/Parse-SDK-JS/api/2.9.1/Parse.User.htmlsetPassword stores the user's password in localStorage as raw text making it vulnerable to anyone with access to your localStorage. We believe this is the only time that password is stored at all. In the...

PT-2020-3040

Name of the Vulnerable Software and Affected Versions Ansible versions 2.7.x through 2.7.14 Ansible versions 2.8.x through 2.8.6 Ansible versions 2.9.x through 2.9.0 Description The issue is related to the absence of consideration for the no log flag in Ansible's system management configuration...

user/group information can be corrupted across storing in fsimage and reading back from fsimage

In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage...

Atlassian Crowd Session Hijacking Vulnerability

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A session hijacking vulnerability exists in Atlassian Crowd versions prior to 2.9.1 th...