CVE-2020-27301: Out-of-bounds Write

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "AESUnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

CVE-2020-27302: Out-of-bounds Write

A stack buffer overflow in Realtek RTL8710 and other Ameba-based devices can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake...

PT-2021-3466

Name of the Vulnerable Software and Affected Versions Realtek RTL8710 and other Ameba-based devices affected versions not specified Description A stack buffer overflow in the AES UnWRAP function can lead to remote code execution when an attacker in Wi-Fi range sends a crafted Encrypted GTK value ...

PT-2021-3465

Name of the Vulnerable Software and Affected Versions Realtek RTL8710 and other Ameba-based devices affected versions not specified Description A stack buffer overflow in the memcpy function can lead to remote code execution when an attacker in Wi-Fi range sends a crafted Encrypted GTK value as...

[SECURITY] Fedora 34 Update: php-symfony4-4.4.24-1.fc34

Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...

[SECURITY] Fedora 33 Update: php-symfony4-4.4.24-1.fc33

Symfony PHP framework version 4. NOTE: Does not require PHPUnit bridge...

ZenFone 4 Max (ZC520KL) suffers from an information disclosure vulnerability

ZenFone 4 Max ZC520KL is a smartphone. An information disclosure vulnerability exists in ZenFone 4 Max ZC520KL. An attacker can exploit the vulnerability to obtain sensitive information...

PT-2021-20234

Name of the Vulnerable Software and Affected Versions: trim-newlines versions 3.0.0 and earlier, 4.x before 4.0.1 Description: The issue is related to regular expression denial-of-service ReDoS for the .end method. This can cause a denial-of-service condition. Recommendations: For versions 3.0.0...

CVE-2021-3509

A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The...

PT-2021-6573

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An integer overflow vulnerability exists within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic,...

PT-2021-6776

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer truncation vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause improper memory allocation, resultin...

PT-2021-6772

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer overflow vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked...

CVE-2021-3509: Improper Neutralization of Input During Web Page Generation

A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The...

PT-2021-6762

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality, where a specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic. This results in a...

PT-2021-6467

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the absence of result checking for an arithmetic operation in the pcrb decoder functionality of the GPAC multimedia platform's MPEG-4 decoding. This...

PT-2021-6763

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. It involves an integer overflow vulnerability due to unchecked...

CVE-2021-29210

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29211

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

Crlf injection

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

Crlf injection

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...