13634 matches found
Code injection
This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...
CVE-2021-23386
The CVE-2021-23386 vulnerability affects dns-packet prior to 5.2.2. It creates buffers with allocUnsafe and may not fill them before forming network packets, potentially exposing internal memory over unencrypted networks when querying crafted invalid domain names. The issue is documented in the c...
Weak Password Vulnerability in Anet-Smart Wi-Fi Gateway System
hereinafter referred to as AnNet Communications is a solution provider focusing on the research, development, production, sales and service of network communication equipment based on IP technology, providing users with network security, routers, switches, firewalls, wireless AP coverage and othe...
SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1654-1)
This update for libxml2 fixes the following issues : CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in...
SQL Injection Vulnerability in Zhongxin Golden Shield Information Security Management System
Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. There is a SQL injection vulnerability in the Zhongxin Golden Shield information security management system, which can be exploited by attackers to obta...
SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-39085)
Blue Ocean Excellence Certification and Billing Management System is a network security operation management system that is based on realizing network operation, enhancing global security as the center and improving management efficiency. The Blue Ocean Excellence Billing Management System suffer...
Command Execution Vulnerability in TopIDP, an Intrusion Prevention System of Tianrongxin
TopIDP, the intrusion prevention system of TIANRONGXIN, is a network security protection product that defends against all kinds of attack threats in the network and protects customers' network IT service resources in real time. There is a command execution vulnerability in TopIDP. An attacker can...
Code Execution Vulnerability in Blue Ocean Premier Billing Management System
Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. A code execution vulnerability exists in the Blue Ocean Premier Billi...
EulerOS 2.0 SP8 : python-pygments (EulerOS-SA-2021-1887)
According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...
EulerOS 2.0 SP8 : git (EulerOS-SA-2021-1870)
According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as...
EulerOS 2.0 SP5 : PyYAML (EulerOS-SA-2021-1912)
According to the version of the PyYAML package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes...
Denial of Service Vulnerability in MERCURY D121G, MW310R, M6G, D196G
hereinafter referred to as MERCURY was founded in 2001, and its business scope includes the following: general business items are: technical development of computer wireless LAN products, computer hardware and software, communication equipment, electronic products and network security equipment. ...
EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2021-1880)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...
SUSE SLES12 Security Update : python3 (SUSE-SU-2021:1621-1)
This update for python3 fixes the following issues : Security issues fixed : CVE-2020-27619: where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. bsc1178009 Other fixes : Make sure to close the 'importfailed.map' file after the exception has been raised in order to avoid...
What a Year It’s Been: RSA 2021 Embraces ‘Resilience’
Clearly, the months since the world shut down in March of 2020 fomented a radical shift in how people work and live, and it’s brought a range of crises and challenges to bear across the spectrum of our lives. These profound changes and experiences were also felt in cybersecurity, bringing...
CVE-2021-32456
CVE-2021-32456 affects SITEL CAP/PRX firmware 5.2.01. Affected component: firmware networking/cleartext handling that allows a local-network attacker to obtain authentication passwords by analyzing traffic. Impact: confidentiality of credentials is HIGH per CVSS-3.1 (base score 6.5); exploitation...
Debian DLA-2663-1 : libimage-exiftool-perl security update
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. For Debian 9 stretch, this problem has been fixed in version 10.40-1+deb9u...
Top Certifications for Network Security Administrators in 2021
By Waqas The demand for security professionals is at its peak like never before. Here are some certifications that will help you polish your skills. This is a post from HackRead.com Read the original post: Top Certifications for Network Security Administrators in 2021...
SUSE SLED15 / SLES15 Security Update : dtc (SUSE-SU-2021:1598-1)
This update for dtc fixes the following issues : make all packaged binaries PIE-executables bsc1184122. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...