CVE-2021-32729

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

CVE-2021-32729

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

CVE-2021-32729 A user without PR can reset user authentication failures information

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

CVE-2021-32729: Protection Mechanism Failure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A vulnerability exists in versions prior to 12.6.88, 12.10.4, and 13.0. The script service method used to reset the authentication failures record can be executed by any user with Script right...

DEBIAN-CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

Unused return value from transfer()/transferFrom()

Handle JMukesh Vulnerability details Impact return value from transfer/transferFrom ensure success of the call and if not , it describe the reason for. It is usually good to add a require-statement that checks the return value or to use something like safeTransfer; unless one is sure the given...

ALBA-2021:2598 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: aws-vpc-move-ip: Enable eni lookup for AWS shared networks v...

osbuild-composer bug fix update

Osbuild-composer provides an image-building service based on osbuild. Bug fixes: RHEL for Edge Container Commit fails silently when Repo URL doesn't have a trailing slash. BZ1951192 Unstable ordering of results from osbuild v2 causes test failures. BZ1955094...

Unchecked token transfers

Handle Lucius Vulnerability details Impact The functions transerFrom/transer do not revert on failure and instead simply return false. Without checks on the return values, the transfers could potentially fail silently allowing unexpected issues with certain token pools. E.G. If a user calls depos...

VMware Tools DoS

The vulnerability of the VMware Tools utility driver for Windows operating systems exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CODESYS Control V2 Linux SysFile DoS

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Podman Uncontrolled Resource Consumption DoS

The vulnerability of the podman package in the Red Hat Enterprise Linux operating system and the Red Hat OpenShift Container Platform corporate platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

MicroDigital camera software Heap Buffer Overflow DoS

The vulnerability of MicroDigital camera software of the N series lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause malfunctions by using a specially crafted file...

Mac OS Buffer Overflow DoS

The vulnerability of Mac OS operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause system failures or gain unauthorized access to protected information...

Remote Desktop Services Spoofing

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

TCP/IP driver Windows DoS

The vulnerability of the TCP/IP driver for Windows operating systems is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Quick PDF Library Unauthenticated Access DoS

The vulnerability of the implementations of the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly functions in the PDF handling library is related to the occurrence of operations outside the buffer in memory when processing xref entries. Exploitation of this...

IBM DB2 Privilege Escalation

The vulnerability of the IBM DB2 database management system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted...

Aurora Center Application Software Library Resource Consumption DoS

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Aurora Center Input Validation DoS

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...