Telegram Information Disclosure Vulnerability

Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in Telegram that originates from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

Telegram Information Disclosure Vulnerability

Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in Telegram that arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain sensitive information...

The vulnerability of the TMUI interface of the access control and remote authentication management tool BIG-IP Access Policy Manager, the BIG-IP Advanced Firewall Manager network interface, BIG-IP Advanced Web Application Firewall, the BIG-IP Application Acceleration Manager application delivery tools, the BIG-IP Application Security Manager application protection tools, the BIG-IP DDos Hybrid Defender DDoS attack protection tools, the BIG-IP DNS server, the BIG-IP Fraud Protection Service module, the BIG-IP Link Controller internet traffic balancing system, the BIG-IP Local Traffic Manager local traffic balancing system, the BIG-IP Policy Enforcement Manager network traffic control and management system, the SSL decryption and SSL encrypted traffic redirection tool SSL Orchestrator, allowing a perpetrator to execute arbitrary code.

The vulnerability of the TMUI interface of the BIG-IP Access Policy Manager, the BIG-IP Advanced Firewall Manager’s network interface, the BIG-IP Application Acceleration Manager’s application delivery components, the BIG-IP Application Security Manager’s application protection components, the...

Security fix for the ALT Linux 10 package postgresql15-1C version 12.5-alt4

Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...

Is-user-valid Injection Vulnerability

An injection vulnerability exists in Is-user-valid, which arises when, during the course of a user input operation to construct a command, data structure, or record, the network system or product lacks proper validation of the user input data, and fails to filter, or fails to correctly filter out...

Security fix for the ALT Linux 9 package postgresql12-1C version 12.5-alt4

Feb. 11, 2021 Alexei Takaseev 12.5-alt4 - Fix permission checks on constraint violation errors on partitions. Fixes CVE-2021-3393 - Re-applay patch from 1C...

ZCFees Number Error Vulnerability

A Numeric Error vulnerability exists in ZCFees that arises from a network system or product not properly calculating or converting resulting numbers. An attacker could exploit this vulnerability to cause, among other things, an integer overflow or a sign error...

[SECURITY] Fedora 32 Update: pngcheck-2.4.0-7.fc32

pngcheck verifies the integrity of PNG, JNG and MNG files by checking the internal 32-bit CRCs checksums and decompressing the image data; it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statist i...

libmysofa null pointer dereference vulnerability (CNVD-2021-11056)

libmysofa is a lightweight C library for reading AES SOFA files. A null pointer dereference vulnerability exists in libmysofa 0.5 - 1.1. The vulnerability stems from the changeAttribute function failing to handle input data correctly. An attacker can exploit the vulnerability to cause segmentatio...

PT-2021-2949 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to an insecure direct object reference IDOR in the product module, which could lead to unauthorized...

PT-2021-2026 · Microsoft · Windows Fax Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Windows Fax Service, which is associated with privilege management errors. This allows a remote attacker to...

PT-2021-2092

Name of the Vulnerable Software and Affected Versions: Intel EPID SDK versions prior to 8 Description: The issue is related to improper input validation and errors in privilege management. It may allow an authenticated user to potentially enable an escalation of privilege via local access...

PT-2021-2070 · Microsoft · Skype For Business Server

Name of the Vulnerable Software and Affected Versions: Skype for Business Server Microsoft Lync Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks...

The vulnerability of the IPSec tunnel of Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage allows a attacker to cause service interruptions.

The vulnerability of the IPSec tunnel of Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to errors in processing IP packets passing through...

The vulnerability of the InnoDB component of the MySQL Database Server allows a attacker to cause service failures or gain privileged access.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures or gain privileged access through network packets...

PT-2021-2054 · Microsoft · Windows Trust Verification Api +1

Name of the Vulnerable Software and Affected Versions: Windows Trust Verification API affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Trust Verification API, which is caused by resource release errors. This vulnerability can be...

[SECURITY] [DLA 2550-1] openjpeg2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2550-1 [email protected] https://www.debian.org/lts/security/ Brian May February 09, 2021 https://wiki.debian.org/LTS -...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

The vulnerability of the device controller in the Cisco Data Center Network Manager system allows a intruder to compromise the integrity of data.

The vulnerability of the Data Center Network Manager DCNM of the Cisco Data Center Network system is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause service failures or gain privileged access.

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain privileged access through network packets...