2769 matches found
Juniper Networks Junos OS 安全漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability that arises from a cyclic flaw in the Juniper Networks Junos O...
RHEL 8 : virt:av and virt-devel:av (RHSA-2021:3703)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3703 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...
Moderate: Red Hat Security Advisory: virt:8.2 and virt-devel:8.2 security update
An update for the virt:8.2 and virt-devel:8.2 modules is now available for Red Hat Enterprise Linux Advanced Virtualization 8.2.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
libvirt: Insecure sVirt label generation
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality a...
Moderate: Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update
An update for the virt:av and virt-devel:av modules is now available for Red Hat Enterprise Linux Advanced Virtualization 8.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
libvirt: Insecure sVirt label generation
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality a...
WordPress Download Manager < 3.2.16 - Admin+ Stored Cross-Site Scripting
The plugin does not escape some of the Download settings when outputting them, allowing high privilege users to perform XSS attacks even when the unfilteredhtml capability is disallowed - Create a new Download, add the following payload in the "Version" and "Link Label" fields from the 'Package...
CVE-2021-36841
Authenticated Stored Cross-Site Scripting XSS vulnerability in YITH Maintenance Mode WordPress plugin versions = 1.3.7, vulnerable parameter &yithmaintenancenewslettersubmitlabel. Possible even when unfiltered HTML is disallowed by WordPress configuration...
CVE-2021-24613
The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed...
CVE-2021-24613
The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed...
GHSA-5PG8-H4GV-M3P8 Null pointer deference in fltk
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent...
CVE-2021-1588
A vulnerability in the MPLS Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper input validation when an affected devi...
OPENSUSE-SU-2021:2812-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 - CVE-2021-3667: Unlock object on ACL fail in storagePoolLookupByTargetPath bsc1188843 Non-security issues fixed: - virtlockd: Don't report error if lockspace...
SUSE-SU-2021:2812-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 - CVE-2021-3667: Unlock object on ACL fail in storagePoolLookupByTargetPath bsc1188843 Non-security issues fixed: - virtlockd: Don't report error if lockspace...
MGASA-2021-0399 Updated libvirt packages fix security vulnerability
Updated libvirt packages fix security vulnerability: insecure sVirt label generation CVE-2021-3631...
Updated libvirt packages fix security vulnerability
Updated libvirt packages fix security vulnerability: insecure sVirt label generation CVE-2021-3631...
OPENSUSE-SU-2021:1119-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 This update was imported from the SUSE:SLE-15-SP2:Update update project...
The vulnerability of Juniper Networks Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states, allowing a hacker to trigger a service failure.
The vulnerability of Juniper Networks’ Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states during packet processing in MPLS. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
SUSE-SU-2021:2471-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2021-3631: fix SELinux label generation logic bsc1187871...
CVE-2021-1614
A vulnerability in the Multiprotocol Label Switching MPLS packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that...