Denial Of Service (DoS)

github.com/brocaar/chirpstack-network-server is vulnerable to denial of service DoS. Mishandling of de-duplication at the MQTT backend allows an attacker to cause a denial of service condition by sending malicious frequency attributes to CollectAndCallOnceCollect in internal/uplink/collect.go...

PT-2020-6602 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 1.10.11 Description: The issue is related to the Experimental API in Apache Airflow, which previously allowed all API requests without authentication by default. This poses security risks to users who are not...

cups security and bug fix update

1:2.2.6-38 - 1775590 - rastertoepson filter crashes with paper size A6 1:2.2.6-37 - forgot to enable optimization - 1833516 1:2.2.6-36 - 1838449 - ipp/socket backends connect to turned off device for eternity contimeout is not applied - 1689207 - Add failover backend - 1833516 - DirtyCleanInterva...

Command Execution Vulnerability in WeCenter Admin Backend

WeCenter Social Knowledge Quiz System is a php quiz system developed with PHP+MySQL. A command execution vulnerability exists in the WeCenter administration backend. An attacker can exploit this vulnerability to gain control of the server...

CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

Design/Logic Flaw

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

CVE-2020-16122

CVE-2020-16122 concerns PackageKit’s apt backend, which incorrectly treated all local .deb packages as trusted. The vulnerability arises because the apt security model relies on repository trust rather than the contents of individual files, enabling a local attacker to potentially install malicio...

CVE-2020-16122 Packagekit's apt backend lets user install untrusted local packages

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

SQL Injection Vulnerability in MCms Backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms backend SQL injection vulnerability, attackers can use the...

Jiangxi Minsoft Technology Co., Ltd. MCms background exists arbitrary file deletion vulnerability

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms back-end arbitrary file deletion vulnerability, an attacker can us...

File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co. Ltd (CNVD-2020-64532)

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...

File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...

Command execution vulnerability in PHPEMS backend (CNVD-2020-64558)

PHPEMS is an open source Chinese online examination system, the system is based on PHP for development, is a collection of online exams, video playback and other functions, on the operation of the simple domestic boutique system. PHPEMS backend command execution vulnerability , attackers can use...

freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...

kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field

A stack buffer overflow issue was found in the getrawsocket routine of the Host kernel accelerator for virtio net vhost-net driver. It could occur while doing an ictolVHOSTNETSETBACKEND call, and retrieving socket name in a kernel stack variable via getrawsocket. A user able to perform ioctl2 cal...

DEDECMSV6 backend di***_li***.php file has SQL injection vulnerability

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A SQL injection vulnerability exists in the DEDECMSV6 backend dili.php file. An attacker can exploit this vulnerability to obtain sensitive information from the database...

SUSE-SU-2020:3125-1 Security update for sane-backends

This update for sane-backends fixes the following issues: - sane-backends version upgrade to 1.0.31: sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524...

File Upload Vulnerability in CRMEB Knowledge Payment System Backend

CRMEB based on ThinkPhp5.0 + Vue + EasyWeChat development of a CRMEB new retail mall system. A file upload vulnerability exists in the backend of CRMEB Knowledge Payment System, which can be exploited by attackers to gain control of the server...