934 matches found
PT-2021-16606
Name of the Vulnerable Software and Affected Versions: RKP prior to SMR JUN-2021 Release 1 Description: An improper address validation in RKP allows local attackers to remap EL2 memory as writable, assuming EL1 is compromised. This issue enables attackers to potentially escalate privileges or...
CVE-2021-25411: Improper Control of Generation of Code
Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory...
PT-2021-16607
Name of the Vulnerable Software and Affected Versions: RKP versions prior to SMR JUN-2021 Release 1 Description: An improper address validation in RKP allows local attackers to create executable kernel pages outside the code area, assuming EL1 is compromised. Recommendations: For versions prior t...
CVE-2021-25415: Improper Control of Generation of Code
Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable...
PT-2021-16602
Name of the Vulnerable Software and Affected Versions: RKP api versions prior to SMR JUN-2021 Release 1 Description: The issue is related to improper address validation in the RKP api, allowing root privileged local attackers to write to read-only kernel memory. This can be exploited by local...
Django < 2.2.24, 3.0 < 3.1.12, 3.2 < 3.2.4 Multiple Vulnerabilities - Linux
Django is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2021-4521
Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.24 Django versions 3.x before 3.1.12 Django versions 3.2 before 3.2.4 Description The issue is related to the URLValidator, validate ipv4 address, and validate ipv46 address functions in Django, which do not...
Arbitrary Code Execution
python3 is vulnerable to arbitrary code execution. IP address octets are left stripped instead of evaluated as valid IP addresses due to improper input validation of octal strings in the stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks o...
CVE-2021-25737
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs...
PT-2021-6816
Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description A security issue in Kubernetes allows a remote attacker to redirect pod traffic to private networks on a Node, potentially accessing confidential data and compromising its integrity. The...
USN-4919-1 openslp-dfsg vulnerability
It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash or possibly execute arbitrary code...
SUSE: Security Advisory (SUSE-SU-2018:0438-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-4665
Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description The issue is related to insufficient address validation in the headers of the Address Book component in Microsoft Outlook. This can be exploited by a remote attacker to conduct...
Nextcloud 注入漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in the Nextcloud Desktop client, which stems from insufficient validation of input provided to a user passed through a URL....
PT-2021-7695 · Unknown +1 · Net::Netmask +1
Name of the Vulnerable Software and Affected Versions: Net::Netmask versions prior to 2.0000 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string, which can allow attackers to bypass access control based on IP addresses...
PT-2021-7694 · Unknown +1 · Data::Validate::Ip +1
Name of the Vulnerable Software and Affected Versions: Data::Validate::IP versions 0.29 and earlier Description: The issue is related to improper authorization in the Data::Validate::IP module. It allows a remote attacker to impact data integrity by bypassing access control based on IP addresses...
CVE-2021-21267
Schema-Inspector is an open-source tool to sanitize and validate JS objects npm package schema-inspector. In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input for example...
PT-2021-14375
Name of the Vulnerable Software and Affected Versions: schema-inspector versions prior to 2.0.0 Description: The email address validation in schema-inspector is vulnerable to a denial-of-service attack where some input, for example...