Trend Micro Home Network Security 信任管理问题漏洞

Trend Micro Home Network Security is a network appliance from Trend Micro, Inc. It is used to scan all incoming and outgoing traffic to and from the home network to prevent intrusions, block hacking and cyber threats, and protect privacy. There is a security vulnerability in Trend Micro Home...

Debian DLA-2665-1 : ring security update

An issue has been found in ring, a secure and distributed voice, video and chat platform. Actually the embedded copy of pjproject is affected by this CVE. Due to bad handling of two consecutive crafted answers to an INVITE, the attacker is able to crash the server resulting in a denial of service...

Trend Micro Inc. Home Network Security SFTP log collection server hard-coded password vulnerability

Summary A hard-coded password vulnerability exists in the SFTP Log Collection Server function of Trend Micro Inc.’s Home Network Security 6.1.567. A specially crafted network request can lead to arbitrary authentication. An attacker can send an unauthenticated message to trigger this vulnerabilit...

Security Bulletin: A security vulnerabilitiy has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2019-17006)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilitiy in various Open Source packages: Vulnerability Details CVEID: CVE-2019-17006 DESCRIPTION: Mozilla Network Security Services NSS, as used in Mozilla Firefox is vulnerable to a heap-based buff...

Code injection

This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...

CVE-2021-23386

The CVE-2021-23386 vulnerability affects dns-packet prior to 5.2.2. It creates buffers with allocUnsafe and may not fill them before forming network packets, potentially exposing internal memory over unencrypted networks when querying crafted invalid domain names. The issue is documented in the c...

Weak Password Vulnerability in Anet-Smart Wi-Fi Gateway System

hereinafter referred to as AnNet Communications is a solution provider focusing on the research, development, production, sales and service of network communication equipment based on IP technology, providing users with network security, routers, switches, firewalls, wireless AP coverage and othe...

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2021:1654-1)

This update for libxml2 fixes the following issues : CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel bsc1185698 CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess bsc1185408. CVE-2021-3517: Fixed a heap-based buffer overflow in...

SQL Injection Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. There is a SQL injection vulnerability in the Zhongxin Golden Shield information security management system, which can be exploited by attackers to obta...

SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-39085)

Blue Ocean Excellence Certification and Billing Management System is a network security operation management system that is based on realizing network operation, enhancing global security as the center and improving management efficiency. The Blue Ocean Excellence Billing Management System suffer...

Command Execution Vulnerability in TopIDP, an Intrusion Prevention System of Tianrongxin

TopIDP, the intrusion prevention system of TIANRONGXIN, is a network security protection product that defends against all kinds of attack threats in the network and protects customers' network IT service resources in real time. There is a command execution vulnerability in TopIDP. An attacker can...

Code Execution Vulnerability in Blue Ocean Premier Billing Management System

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. A code execution vulnerability exists in the Blue Ocean Premier Billi...

EulerOS 2.0 SP8 : python-pygments (EulerOS-SA-2021-1887)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...

EulerOS 2.0 SP5 : PyYAML (EulerOS-SA-2021-1912)

According to the version of the PyYAML package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes...

EulerOS 2.0 SP8 : git (EulerOS-SA-2021-1870)

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as...

Denial of Service Vulnerability in MERCURY D121G, MW310R, M6G, D196G

hereinafter referred to as MERCURY was founded in 2001, and its business scope includes the following: general business items are: technical development of computer wireless LAN products, computer hardware and software, communication equipment, electronic products and network security equipment. ...

SUSE SLES12 Security Update : python3 (SUSE-SU-2021:1621-1)

This update for python3 fixes the following issues : Security issues fixed : CVE-2020-27619: where Lib/test/multibytecodecsupport calls eval on content retrieved via HTTP. bsc1178009 Other fixes : Make sure to close the 'importfailed.map' file after the exception has been raised in order to avoid...

EulerOS 2.0 SP8 : libtiff (EulerOS-SA-2021-1880)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...

What a Year It’s Been: RSA 2021 Embraces ‘Resilience’

Clearly, the months since the world shut down in March of 2020 fomented a radical shift in how people work and live, and it’s brought a range of crises and challenges to bear across the spectrum of our lives. These profound changes and experiences were also felt in cybersecurity, bringing...

CVE-2021-32456

CVE-2021-32456 affects SITEL CAP/PRX firmware 5.2.01. Affected component: firmware networking/cleartext handling that allows a local-network attacker to obtain authentication passwords by analyzing traffic. Impact: confidentiality of credentials is HIGH per CVSS-3.1 (base score 6.5); exploitation...