PT-2021-25906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.9.276 Description A buffer overflow issue exists in the H RTAS rets buffer. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.10 and is fixed in Lin...

PT-2021-25873

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.14.240 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.14.241. The actual impact and attack plausibility have not...

PT-2021-25777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 5.4.135 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.4.136. The actual impact and attack plausibility have not ye...

PT-2021-25937

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.277 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.4.277. The actual impact and attack plausibility have not yet...

PT-2021-29868

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.10 through 4.14.240 Description The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v4.14.241. The actual impact and attack plausibility have not...

PT-2021-25640

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.10 through 5.13.5 Description: The issue is related to a buffer overflow in the H RTAS rets buffer. It was introduced in version v3.10 and fixed in version v5.13.6. The actual impact and attack plausibility have not ye...

Panasonic Sanyo CCTV Network Camera 2.03-0x Cross Site Request Forgery Vulnerability

Panasonic Sanyo CCTV Network Camera version 2.03-0x allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. These actions can be exploited to perform authentication detriment and account password change with administrative privilege...

Panasonic Sanyo CCTV Network Camera 2.03-0x Cross Site Request Forgery

!-- Panasonic Sanyo CCTV Network Camera 2.03-0x CSRF Disable Authentication / Change Password Vendor: Panasonic Corporation | SANYO Electric Co., Ltd. Product web page: https://www.panasonic.com https://www.sanyo-av.com https://panasonic.net/sanyo/cs/index.html Affected version: Model: VCC-HD5600...

ffmpeg:ffmpeg_AV_CODEC_ID_H264_fuzzer: Heap-buffer-overflow in get_bits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6357946765279232 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

The vulnerability of the Object.h component in the Poppler PDF rendering library, related to a lack of flow control implementation, allows attackers to cause service failures.

The vulnerability of the Object.h component in the Poppler PDF rendering library is related to a lack of implementation for flow control. Exploiting this vulnerability allows an attacker to cause service failures...

June 29, 2021—KB5004760 (OS Builds 19041.1082, 19042.1082, and 19043.1082) Out-of-band

None None...

Important: Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.16

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : RHV-H security update (redhat-virtualization-host) 4.3.16 (Important) (RHSA-2021:2519)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2519 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host...

PT-2021-3638

Name of the Vulnerable Software and Affected Versions Instant Images – One Click Unsplash Uploads WordPress plugin versions prior to 4.4.0.1 Description The issue is related to the improper validation and sanitization of the unsplash download w and unsplash download h parameter settings in the...

CVE-2021-29208

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

Crlf injection

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29209

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2021-29202

A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H...

CVE-2021-29211

CVE-2021-29211 affects multiple HPE products, including HPE Integrated Lights-Out 4 (iLO 4), iLO 5 for Gen10 servers, and related SimpliVity offerings. The issue is a remote cross-site scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected ve...

CVE-2021-29206: Improper Neutralization of Input During Web Page Generation

A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H versions: Pri...