CVE-2021-29201: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

CVE-2021-29202: Buffer Copy without Checking Size of Input

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H...

CVE-2021-29206: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...

PT-2021-6482

Name of the Vulnerable Software and Affected Versions GPAC versions 1.0.1 Description The issue is related to the co64 decoder functionality in the GPAC multimedia platform, specifically in the MPEG-4 decoding. It involves incorrect checking of the result of an arithmetic operation, which can lea...

RHEL 8 : squid:4 (RHSA-2021:2025)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2025 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: improper inpu...

PT-2021-18124

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18130

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18128

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18121

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18126

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18120

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18129

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18123

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18125

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

PT-2021-18127

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 4 iLO 4 versions prior to 2.78 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers versions prior to 2.78 HPE SimpliVity 380 Gen9 versions prior to 2.78 HPE SimpliVity 380 Gen10 versions prior to 2.78 HPE...

Exim 4 远程代码执行漏洞（CVE-2020-28018）

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: - x Memory Leakage - x...

PT-2021-28257

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as LookupDict2, LookupDictList, and Lookup. No...

Siemens SIMATIC S7-1500

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC S7-1500 CPU 1518F-4 Vulnerabilities: Improper Initialization, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these Intel...

Q2 2018 Speculative Execution Side Channel Update

Summary: Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with different vendors’ processors and operating systems. Intel is committed to product and...

Oracle Linux 8 : squid:4 (ELSA-2020-3623)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3623 advisory. - Resolves: 1872345 - CVE-2020-15811 squid:4/squid: HTTP Request Splitting could result in cache poisoning - Resolves: 1872330 - CVE-2020-15810...