PT-2021-24148

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client...

PT-2021-24151

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client...

CVE-2021-44677: Deserialization of Untrusted Data

An issue 1 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44680: Deserialization of Untrusted Data

An issue 4 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

PT-2021-24146

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue arises from the deserialization behavior inherent to the .NET Remoting service, which is used by several services started by the Enterprise Vault application on start-up...

CVE-2021-44678: Deserialization of Untrusted Data

An issue 2 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

PT-2021-24149

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on...

Veritas Enterprise Vault 代码问题漏洞

Veritas Enterprise Vault is an enterprise-grade file protection, archiving automation software from Veritas, USA. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions where the Enterprise Vault application starts multiple services that listen for commands from the...

PT-2021-24150

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on...

CVE-2021-44679: Deserialization of Untrusted Data

An issue 3 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

Veritas Enterprise Vault 代码问题漏洞

Veritas Enterprise Vault is an enterprise-grade file protection, archiving automation software from Veritas, USA. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions where the Enterprise Vault application starts multiple services that listen for commands from the...

Mitsubishi Electric MELSEC iQ-R series 输入验证错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. An input validation error vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series, which arises from a lack of proper control over the allocation and maintenance of finite...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4961281405222912 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2782)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-2782)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to ...

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-2745)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2745)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5137-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5137-2: Linux kernel vulnerabilities

It was discovered that the f2fs file system in the Linux kernel did not properly validate metadata in some situations. An attacker could use this to construct a malicious f2fs image that, when mounted and operated on, could cause a denial of service system crash or possibly execute arbitrary code...

Mozilla Firefox Security Advisory (MFSA2015-57) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...