6828 matches found
CVE-2021-27927
In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init method. An...
PT-2021-28135
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of the sc pkcs15emu oberthur add cert, sc oberthur parse publicinfo, and sc pkcs15emu oberthur ini...
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
...
Medium: cloud-init
Issue Overview: A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'. CVE-2019-0816 Affected Packages: cloud-init Note: This advisory is applicabl...
Amazon Linux 2 : cloud-init (ALAS-2021-1595)
The version of cloud-init installed on the remote host is prior to 19.3-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1595 advisory. A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use...
cloud-init bug fix and enhancement update
The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fixes and Enhancements: Azure Update existing user password RHEL8x BZ1916839...
DEBIAN-CVE-2021-27212
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service daemon exit via a short timestamp. This is related to schemainit.c and checkTime...
PT-2021-30948
Уязвимость функции init parsec secid модуля ядра linux-astra-modules связана с некорректным освобождением памяти после завершения её использования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2021-27167
An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init3bbpassword in libciadaptationlayer.so...
PT-2021-17286
Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, where a password of four hexadecimal characters for the admin account is generated in init 3bb password in libci adaptation layer.so...
PT-2021-17025
Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTPS server version 7.0 Description The issue concerns a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool. This is related to the mg tls init function in the Cesanta Mongoose HTT...
PT-2021-17024
Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTPS server versions 6.7 through 7.0 Description The mg tls init function in the Cesanta Mongoose HTTPS server is vulnerable to a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool...
PT-2021-28039
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash state indicates involvement of the sc pkcs15emu oberthur add data, sc oberthur parse privateinfo, and sc pkcs15emu oberthur in...
Unspecified Vulnerability in Rust (CNVD-2021-13699)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust lazy-init crate through 2021-01-17, which stems from a lack of send bindings in Lazy, leading to data contention. No details of the vulnerability are provided at this time...
CentOS 8 : cloud-init (CESA-2020:3050)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:3050 advisory. - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 Note that Nessus has not tested for this issue but has instead relied only...
CentOS 8 : cloud-init (CESA-2020:4650)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4650 advisory. - cloud-init: Use of random.choice when generating random password CVE-2020-8631 - cloud-init: Too short random password length in ccsetpassword in...
PT-2021-28034
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash involves the safe ltf8 get, cram const decode init, and cram...
CVE-2021-25901
An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race...
