NATS Server 访问控制错误漏洞

NATS Server is an open source messaging system. The system is mainly used for cloud-native applications, IoT messaging and microservices architecture. An access control error vulnerability exists in NATS Server 2.x before 2.2.0 and JWT library before 2.0.1, which stems from improper handling of...

NewStart CGSL MAIN 6.02 : linux-firmware Vulnerability (NS-SA-2021-0082)

The remote NewStart CGSL host, running version MAIN 6.02, has linux-firmware packages installed that are affected by a vulnerability: - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalation ...

USN-4602-1: Perl vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions are evaluated, a remote attacker could possibly use thi...

USN-4754-2: Python regression | Cloud Foundry

Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a regression in Python 2.7. This update reverts the security fix pending further investigatio...

USN-4754-1: Python vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a denial of...

CVE-2021-22857

creationtimestamp| type| source ---|---|--- 2021-02-17 14:48:49+00:00| seen| https://t.me/cibsecurity/23703...

Darkdump - Search The Deep Web Straight From Your Terminal

Darkdump is a simple script written in Python3.9 in which it allows users to enter a search term query in the command line and darkdump will pull all the deep web sites relating to that query. Darkdump wraps up the darksearch.io API. Installation 1. git clone https://github.com/josh0xA/darkdump 2...

USN-4705-1: Sudo vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator...

USN-4680-1: Linux kernel vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description It was discovered that debugfs in the Linux kernel as used by blktrace contained a use-after-free in some situations. A privileged local attacker could possibly use this to cause a denial of service syste...

USN-4676-1: OpenEXR vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or...

CVE-2020-13583

creationtimestamp| type| source ---|---|--- 2021-01-27 11:02:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2582 2021-02-11 00:41:46+00:00| seen| https://t.me/cibsecurity/23409...

USN-4653-2 containerd vulnerability

USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for the inconvenience...

Vulnerabilities fixed in Ghostscript

Vulnerabilities have been fixed in Ghostscript. The vulnerabilities allow a malicious party to cause a denial-of-service cause and to execute arbitrary code under the privileges of the user. -= Ubuntu =- Canonical has made updates available for Ubuntu 16.04 LTS and 18.04 LTS to fix the...

FasterXML jackson-databind 代码问题漏洞

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. FasterXML jackson-databind has a security vulnerability with FasterXML jackson-databind. No detailed vulnerability details are provided at this time...

Number withdrawn

This CVE number has been withdrawn...

CVE-2020-8941 Unchecked buffer overrun in enc_untrusted_inet_pton

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedinetpton using an attacker controlled klinuxaddrbuffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended...

Schneider Electric Power Scada and EcoStruxure Power Monitoring Expert Security Vulnerabilities

Schneider Electric EcoStruxure Power Monitoring Expert and Schneider Electric Power Scada are both products of Schneider Electric, a French company. Schneider Electric EcoStruxure Power Monitoring Expert is an appliance for power distribution monitoring in IoT environments, and Schneider Electric...

Security Vulnerabilities in Multiple Schneider Electric Products

Schneider Electric EcoStruxure Power Monitoring Expert is a product of the French company Schneider Electric.Schneider Electric EcoStruxure Power Monitoring Schneider Electric EcoStruxure Power Monitoring Expert is a device for power distribution monitoring in IoT environments.Schneider Electric...

CVE-2020-27585

creationtimestamp| type| source ---|---|--- 2020-11-30 22:53:26+00:00| seen| https://t.me/cibsecurity/16949...

USN-4582-1: Vim vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected...