PT-2021-14836

Name of the Vulnerable Software and Affected Versions D-LINK DIR-3040 version 1.13B03 Description An information disclosure issue exists in the WiFi Smart Mesh functionality. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger...

D-LINK DIR-3040 信任管理问题漏洞

D-LINK DIR-3040 is a router from D-Link Taiwan, China. The WiFi Smart Mesh feature of the D-LINK DIR-3040 1.13B03 is vulnerable to information disclosure. An attacker could exploit the vulnerability with a specially crafted network request to cause command execution...

D-LINK DIR-3040 WiFi Smart Mesh information disclosure vulnerability

Summary An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability. Tested Versions D-LINK DIR-3040...

Siemens Simcenter Femap Out-of-Bounds Reading Vulnerability

Siemens Simcenter Femap is a cutting-edge engineering simulation application from Siemens, Germany. An out-of-bounds read vulnerability exists in Siemens Simcenter Femap, which is used to create, edit, and import/reuse mesh-based finite element analysis models of complex products or systems. When...

draco:draco_mesh_decoder_fuzzer: Crash in draco::DepthFirstTraverser<draco::CornerTable, draco::MeshAttributeIndicesEncodi

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5077717201059840 Project: draco Fuzzing Engine: honggfuzz Fuzz Target: dracomeshdecoderfuzzer Job Type: honggfuzzasandraco Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x60200aaaac78 Cra...

OSV-2021-1176 Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37705 Crash type: Index-out-of-bounds Crash state: draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol draco::MeshEdgebreakerDecoderImpl draco::MeshEdgebreakerDecoderImpl...

draco:draco_mesh_decoder_fuzzer: Index-out-of-bounds in draco::MeshEdgebreakerTraversalValenceDecoder::DecodeSymbol

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=4686639960555520 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracomeshdecoderfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.17.1 security update

An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : Red Hat OpenShift Service Mesh 2.0.7.1 (RHSA-2021:3272)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3272 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

RHEL 8 : Red Hat OpenShift Service Mesh 1.1.17.1 (RHSA-2021:3273)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3273 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

CVE-2021-38530

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 befo...

CVE-2021-38530

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.16, RBS40 before 2.5.1.16, RBK20 before 2.5.1.16, RBR20 before 2.5.1.16, RBS20 before 2.5.1.16, RBK50 before 2.5.1.16, RBR50 before 2.5.1.16, RBS50 befo...

istio:fuzz_parse_mesh_networks: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6028436358430720 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsemeshnetworks Job Type: libfuzzerasanistio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

Important: Red Hat Security Advisory: servicemesh-operator security update

An update for servicemesh-operator is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Red Hat OpenShift Service Mesh 安全特征问题漏洞

Red Hat OpenShift Service Mesh is a suite of platforms for connecting, managing, and monitoring microservices-based applications from Red Hat USA. A security signature issue vulnerability exists in the Red Hat OpenShift Service Mesh operator that allows access to all ports on these resources from...

How to Turn Off Amazon Sidewalk

The company is enlisting your Echo and Ring devices into an internet-sharing mesh network starting Monday. It’s not too late to opt out...

Amazon Sidewalk starts sharing your WiFi tomorrow, thanks

Amazon smart device owners only have until June 8 to opt out of a new program that will group their Echo speakers and Ring doorbells into a shared wireless network with their neighbors, a new feature that the shopping giant claims will provide better stability for smart devices during initial set...

Amazon Sidewalk Poised to Sweep You Into Its Mesh

Tweet On June 8, Amazon, the Web giant with tentacles reaching into every nook and cranny of our lives, is going to stretch those tentacles out further by turning all its gadgets into little cell towers so they can help each other out with little slices of bandwidth. It’s created a new Wi-Fi...

@graphql-mesh/container (>=0.0.4-alpha-4e6432fb.0, <=0.0.62), @graphql-mesh/openapi (>=0.10.2, <=0.16.9) +13 more potentially affected by unknown CVE via json-ptr (2.0.0)

json-ptr NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on json-ptr and may be impacted: - @graphql-mesh/container =0.0.4-alpha-4e6432fb.0, =0.10.2, =0.5.2, =0.0.2, =0.6.0, =0.0.1, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =0.0.2, =1.0.264,...

CVE-2020-26559

A flaw was found in the Linux kernel’s Bluetooth Mesh Profile implementation. The Mesh Provisioning procedure has a vulnerability that allows an attacker that was provisioned without access to the AuthValue to identify the AuthValue directly, without brute-forcing its value. Even when a randomly...