656 matches found
DEBIAN-CVE-2021-32739
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a...
CVE-2021-31999
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16...
IBM Event Streams 安全漏洞
IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is primarily used for Apache Kafka deployment, authentication and encrypted communication functions. A security vulnerability exists in IBM Event Streams that allows users to create...
CVE-2021-22352
There is a Configuration Defect Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands...
Tor 信息泄露漏洞
Tor is a network of virtual tunnels. It allows individuals and groups to increase their privacy and security on the Internet. An information disclosure vulnerability exists in Tor. An attacker could forge RELAYEND or RELAYRESOLVED to end a stream bypassing expected access controls...
Updated wpa_supplicant, hostapd packages fix security vulnerability
The wpasupplicant and hostapd packages are updated to fix a forging attacks that may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. CVE-2021-30004...
MGASA-2021-0254 Updated wpa_supplicant, hostapd packages fix security vulnerability
The wpasupplicant and hostapd packages are updated to fix a forging attacks that may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. CVE-2021-30004...
CVE-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...
CVE-2021-23017
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...
Schneider Electric spaceLYnk和homeLYnk 数据伪造问题漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...
Exim 权限许可和访问控制问题漏洞
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...
Forging Attack
wpasupplicant is vulnerable to forging attacks. It may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c...
CVE-2021-29455
Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web Tokens when refreshing an existing JWT...
openSUSE Security Update : wpa_supplicant (openSUSE-2021-563)
This update for wpasupplicant fixes the following issues : - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348. This update was imported from the SUSE:SLE-15:Update update projec...
OPENSUSE-SU-2021:0563-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348. This update was imported from the SUSE:SLE-15:Update update project...
Security update for wpa_supplicant (moderate)
openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2021:0563-1 Rating: moderate References: 1184348 Cross-References: CVE-2021-30004 CVSS scores: CVE-2021-30004 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-30004 SUSE: 5.3...
CVE-2021-30478
Summary: CVE-2021-30478 affects Zulip Server before 3.4. A bug in the can_forge_sender permission (formerly is_api_super_user) allows users with that permission to send messages that appear to come from a system bot, including to other organizations on the same Zulip deployment. The issue is root...
SUSE-SU-2021:1166-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348...
SUSE-SU-2021:1125-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters were mishandled in tls/pkcs1.c and tls/x509v3.c bsc1184348...
