The vulnerability of the astra-safepolicy software for security configuration settings, due to insufficient input validation, allows a perpetrator to trigger a service failure.

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the stderr output. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

The vulnerability of user authentication within the IKE-protocol’s Xauth mechanism, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability related to user authentication within the Xauth protocol of the IKE protocol is linked to improper validation during the file transmission to the program’s input. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Object.h component in the Poppler PDF rendering library, related to a lack of flow control implementation, allows attackers to cause service failures.

The vulnerability of the Object.h component in the Poppler PDF rendering library is related to a lack of implementation for flow control. Exploiting this vulnerability allows an attacker to cause service failures...

The software for regulatory control of integrity of fly-admin-int-check is vulnerable due to insufficient validation of input data. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software for regulating the integrity of fly-admin-int-check is related to the improper verification of integrity by unauthorized users. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data, compromise its...

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the QTgaFile component of the cross-platform software development framework for Qt is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Libvirt virtualization management library, related to information disclosure, allows attackers to access confidential information or cause service failures.

The vulnerability of the Libvirt virtualization management library is related to incorrect permission checking. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...

The vulnerability of the Crmsh cluster’s management layer lies in the lack of a mechanism for managing privileges. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Crmsh cluster management interface is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

EulerOS Virtualization 3.0.2.2 : openldap (EulerOS-SA-2021-2152)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. A...

A user without PR can reset user authentication failures information

Impact The script service method used to reset the authentication failures record can be executed by any user with Script rights and does not require Programming rights as it should have. Note that being able to reset the authentication failure record mean that an attacker with script right might...

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library arises from reading data beyond the allowed buffer limits. This allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the htmlParseTryOrFinish function in the HTMLparser.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

The vulnerability of the `saveBinaryCLProgram` function in the `magick/opencl.c` component of the ImageMagick console graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the saveBinaryCLProgram function in the magick/opencl.c component of the ImageMagick console graphics editor allows for the manipulation of zero-point pointers. Exploiting this vulnerability enables a remote attacker to gain access to confidential data, compromise its...

The vulnerability of the ReadMATImageV4 function in the coders/mat.c component of the console-based ImageMagick graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation emulator is related to a lack of mechanism for controlling code generation. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the disasinsn function in the target/i386/translate.c component of the QEMU hardware emulation software is related to the lack of restrictions on instruction size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and caus...

CVE-2021-32729

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

CVE-2021-32729

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

CVE-2021-32729 A user without PR can reset user authentication failures information

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

DEBIAN-CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

Unused return value from transfer()/transferFrom()

Handle JMukesh Vulnerability details Impact return value from transfer/transferFrom ensure success of the call and if not , it describe the reason for. It is usually good to add a require-statement that checks the return value or to use something like safeTransfer; unless one is sure the given...

ALBA-2021:2598 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: aws-vpc-move-ip: Enable eni lookup for AWS shared networks v...