4799 matches found
SAP NetWeaver AS Java Invoker Servlet Code Execution (1445998)
SAP Netweaver Application Server Java versions before 7.30 are potentially affected by a code execution vulnerability in the invoker servlet. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security,...
PT-2021-18628 · Friendica · Friendica
Name of the Vulnerable Software and Affected Versions: Friendica versions through 2021.01 Description: The issue allows the settings/userexport feature to be accessed by anonymous users, potentially leading to excessive memory consumption and attempted access to an array offset on a value of type...
Ubuntu: Security Advisory (USN-4894-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-17832 · Ca · Ca Ehealth Performance Manager
Name of the Vulnerable Software and Affected Versions: CA eHealth Performance Manager versions 6.3.2.12 and earlier Description: The issue allows an authenticated remote user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data, performing a Reflected...
Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2021-1598)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
March 9, 2021—KB5000856 (Security-only update)
None None...
March 9, 2021—KB5000844 (Monthly Rollup)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: March 9, 2021 (KB4493231)
None None...
March 9, 2021—KB5000812 (OS Build 15063.2679)
None None...
PT-2021-8004 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the sun8i-ss crypto driver of the Linux kernel. This memory leak occurs on an error path and can be exploited by a remote attacker to cause a...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1517)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM Security Verify Information Queue uses a Node.js proxy library that has a known vulnerability (183561)
Summary The web server in IBM Security Verify Information Queue ISIQ uses an older version of the http-proxy package that has a known vulnerability to a denial of service. As of v10.0.0, ISIQ has upgraded to a newer, secure version of http-proxy. Vulnerability Details Third Party Entry: 183561...
Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: March 2, 2021 (KB5000871)
None None...
Researchers Unearth Links Between SunCrypt and QNAPCrypt Ransomware
SunCrypt, a ransomware strain that went on to infect several targets last year, may be an updated version of the QNAPCrypt ransomware, which targeted Linux-based file storage systems, according to new research. "While the two ransomware families are operated by distinct different threat actors on...
Google Chrome < 89.0.4389.72 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...
Google Chrome < 89.0.4389.72 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...
Denial of service attack via .well-known lookups
Impact A malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which...
GHSA-2HWX-MJRM-V3G8 Denial of service attack via .well-known lookups
Impact A malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which...
Denial Of Service (DoS)
matrix-synapse is vulnerable to denial of service DoS. The vulnerability exists as a malicious homeserver could redirect requests to their .well-known file to a large file...
CVE-2021-21274
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead t...