CVE-2021-28899

Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16...

CVE-2021-28899

CVE-2021-28899 affects LIVE555 Streaming Media before 2021.3.16, specifically the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses. The vulnerability path stems from.Live555 components; impact...

CVE-2021-28899

Removed by vendor...

[SECURITY] Fedora 32 Update: openvpn-2.4.11-1.fc32

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

Weak password vulnerability in Byzoro Networks Smart Multi-service Security Gateway Intelligent Management Platform

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A weak password vulnerability exists in the Smart Multi-service Security Gateway intelligent management platform of Byzoro...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34576)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS suffers from SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability (CNVD-2021-33531)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML external entity injection vulnerability exists in Aruba Networ...

Cassia Networks Access Controller

1. EXECUTIVE SUMMARY CVSS v3 6.2 ATTENTION: Low attack complexity Vendor: Cassia Networks Equipment: Access Controller Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read any file from the Access Controller server. 3...

Aruba Networks AirWave Management Platform SQL Injection Vulnerability (CNVD-2021-33530)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A SQL injection vulnerability exists in Aruba AirWave Management...

Aruba Networks AirWave Management Platform Deserialization Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A deserialization vulnerability exists in Aruba Networks AirWave...

F5 Networks BIG-IP : BIG-IP ASM and Advanced WAF WebSocket vulnerability (K18570111)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.5 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K18570111 advisory. - On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before...

Vulnerability fixed in Moxa NPort 5110 firmware

Moxa has fixed a vulnerability in the NP5110 firmware. The vulnerability potentially allows a malicious party to use the device to forward IP traffic to network segments that the initially did not have access to because the NPort devices facilitated IP forwarding. Moxa has released updates to fix...

F5 Networks BIG-IP : BIG-IP APM AD authentication vulnerability (K51213246)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.6 / 13.1.4 / 14.1.4 / 15.1.3 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K51213246 advisory. - On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x befor...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM REST API vulnerability (K23203045)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4 / 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K23203045 advisory. - On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability ( (K90603426)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K90603426 advisory. - On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an...

F5 Networks BIG-IP : cURL vulnerability (K41523201)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.4 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41523201 advisory. Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to...

Command Execution Vulnerability in Wireless SmartWeb Management System

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A command execution vulnerability exists in the Wireless SmartWeb manageme...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

安移通网络 AirWave Management Platform SQL注入漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting, and historical data reporting. An SQL injection vulnerability exists in Aruba AirWave Management...

Fedora: Security Advisory for kernel-tools (FEDORA-2021-e6b4847979)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...