Arbitrary File Read Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Cisco SD-WAN vManage XXE (cisco-sa-vman-xml-ext-entity-q6Z7uVUg)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Logic Flaw Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...

CVE-2021-2253

CVE-2021-2253 affects Oracle Advanced Supply Chain Planning (Oracle Supply Chain) Core in versions 12.1 and 12.2. The vulnerability arises in the core component, enabling an unauthenticated attacker to compromise via HTTP over network access, potentially leading to unauthorized creation, deletion...

CVE-2021-2135

CVE-2021-2135 affects Oracle WebLogic Server (Coherence Container) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The Nuclei template confirms remote code execution via unauthenticated access over T3/IIOP, allowing an attacker with network access to take over the server. Documented impact is fu...

Race condition

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions V5.2, Nucleus Source Code Version...

CVE-2020-27738

CVE-2020-27738 concerns the DNS domain name record decompression in Siemens APOGEE PXC/TALON, Nucleus, SIMOTICS CONNECT 400 and related DNS modules. The issue is improper validation of pointer offsets during DNS response parsing, which can cause a read past the end of an allocated structure and l...

CVE-2020-27736

A vulnerability has been identified in APOGEE PXC Compact BACnet All versions V3.5.5, APOGEE PXC Compact P2 Ethernet All versions V2.8.20, APOGEE PXC Modular BACnet All versions V3.5.5, APOGEE PXC Modular P2 Ethernet All versions V2.8.20, Nucleus NET All versions, Nucleus ReadyStart V3 All versio...

Design/Logic Flaw

On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager FXPC process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processi...

CVE-2021-0249

CVE-2021-0249 is a buffer overflow in Juniper Networks Junos OS Packet Forwarding Engine (PFE) on SRX Series devices. Affected releases include SRX Series: 15.1X49 prior to 15.1X49-D190; 17.4 prior to 17.4R2-S9; 17.4R3 and later prior to 18.1R3-S9; 18.2 prior to 18.2R3-S1; 18.3 prior to 18.3R2-S3...

CVE-2021-0214

The CVE-2021-0214 entry describes a Denial of Service in Juniper Networks Junos OS via the PPMD (periodic packet management daemon) when handling crafted malformed packets. The impact is a crash/restart of PPMD leading to network destabilization and service interruption; continued malformed packe...

Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability

Talos Vulnerability Report TALOS-2021-1239 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31517 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing functionality of Trend Micro Inc.’s...

Weak Password Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability

Talos Vulnerability Report TALOS-2021-1240 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31518 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing function of Trend Micro Inc.’s Home...

3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances

SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security ES product that are being actively exploited in the wild. Tracked as CVE-2021-20021 and CVE-2021-20022, the flaws were discovered and reported to the company by FireEye's Mandiant subsidia...

SUSE SLES12 Security Update : xen (SUSE-SU-2021:1268-1)

This update for xen fixes the following issues : CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 Fixed an issue where xenstored was crashing with segfault bsc1182155. Note that...

OpenEMR 5.0.2.1 - Remote Code Execution

Exploit Title: OpenEMR 5.0.2.1 - Remote Code Execution Exploit Author: Hato0, BvThTrd Date: 2020-08-07 Vendor Homepage: https://www.open-emr.org/ Software Link: https://sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/download Version: 5.0.2.1 without patches...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1248-1)

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673: Fixed multiple bugs in NFC subsytem bsc1178181. CVE-2020-36311: Fixed a denial of service so...

Weak password vulnerability in Tianyue Network Security Audit System V6.0

Tianyue Network Security Audit System Business Network Audit, referred to as Tianyue Audit System, is a compliance management system that conducts fine-grained audits of network operation behaviors in business environments. A weak password vulnerability exists in Tianyue Network Security Audit...