Photon OS 3.0: Mysql PHSA-2021-3.0-0231

An update of the mysql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0231. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Stormshield Network Security 信任管理问题漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security suffers from a security vulnerability that can be exploited by an attacker to trigger a fatal error in order to trigger a denial of service...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security suffers from a security vulnerability that can be exploited by an attacker to trigger a fatal error in order to trigger a denial of service...

Stormshield Network Security 数据伪造问题漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network has a security vulnerability that can be exploited by an attacker to trigger a fatal error to cause a denial of service...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network has a security vulnerability that can be exploited by an attacker to trigger a fatal error to cause a denial of service...

Weak Password Vulnerability in Riptide Networks EG2000SE

Ruijie Networks is an ICT infrastructure and industry solutions provider, with its main business being the research, development, design and sales of network equipment, network security products and cloud desktop solutions. A weak password vulnerability exists in Ruijie Networks EG2000SE. Attacke...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network has a security vulnerability that can be exploited by an attacker to trigger a fatal error to cause a denial of service...

Stormshield Network Security 资源管理错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security has a security vulnerability that can be exploited by an attacker to trigger a denial of service via a fatal error via Stormshield Network Security's SNMP...

Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

Overview ======== Title:- Authenticated XSRF in RN510 Mesh Extender. CVE-ID :- CVE-2021-25327 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested and verified Potential 2.RN62...

OPENSUSE-SU-2021:0644-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Firefox was updated to 78.10.0 ESR bsc1184960 CVE-2021-23994: Out of bound write due to lazy initialization CVE-2021-23995: Use-after-free in Responsive Design Mode CVE-2021-23998: Secure Lock icon could have been spoofed...

Weak Password Vulnerability in Netnifty LeadSec Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. and its predecessor was the Information Security Division of Lenovo Group. Its main business covers network border security protection, application and data security protection, and...

Command Execution Vulnerability in H3C ER G2 Series Routers

H3C ER G2 series is a new generation of enterprise-grade Gigabit high-performance routers launched by Hangzhou Huasan Communication Technology Co. It is targeted at the SMB market of Ethernet/fiber/xDSL access, which mainly includes network environments of government agencies, small and...

EulerOS 2.0 SP3 : ppp (EulerOS-SA-2021-1834)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, o...

EulerOS 2.0 SP3 : mesa (EulerOS-SA-2021-1817)

According to the version of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the...

EulerOS 2.0 SP3 : wireshark (EulerOS-SA-2021-1859)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by...

EulerOS 2.0 SP3 : xdg-utils (EulerOS-SA-2021-1861)

According to the version of the xdg-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The openenvvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER...

ISC BIND GSS-TSIG SPNEGO Buffer Overflow (CVE-2021-25216)

According to its self-reported version, the ISC Bind present on the remote host is affected by a buffer overflow vulnerability: - GSS-TSIG is an extension to the TSIG protocol which is intended to support the secure exchange of keys for use in verifying the authenticity of communications between...

EulerOS 2.0 SP3 : openldap (EulerOS-SA-2021-1824)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in...

Unauthorized Access Vulnerability in Riptide EWEB Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. An unauthorized access vulnerability exists in the Ruijie EWEB management system,...

Aruba ClearPass Policy Manager XML External Entity Injection Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. An XML external entity injection vulnerability exists in Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.9, and 6.7.14-HF1. The vulnerability stems fro...