USN-7497-1 ruby-carrierwave vulnerabilities

Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-21305 Norihide Saito discovered that CarrierWave did not correctly...

Cisco IOS 数据伪造问题漏洞

Cisco IOS is an operating system developed by Cisco for its network devices. A data forgery vulnerability exists in Cisco IOS that stems from a lack of signature verification and could lead to the execution of arbitrary code...

Cisco IOS XE 操作系统命令注入漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from an operating system command injection vulnerability that ste...

Cisco IOS和Cisco IOS XE 安全漏洞

Cisco IOS and Cisco IOS XE are both products of Cisco, Inc.Cisco IOS is a suite of operating systems developed for its network devices.Cisco IOS XE is a single operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...

Cisco IOS XE 代码问题漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A code issue vulnerability exists in Cisco IOS XE that stems from insufficient input...

F5 F5OS 安全漏洞

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in F5 F5OS that stems from improper authorization and could lead to elevation of privilege...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from improper memory...

F5 F5OS 安全漏洞

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in F5 F5OS that stems from an administrator being able to bypass device mode restrictions...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from misbehavior of API...

Drive Data Should Be Managed in Partitions

When installing the OS, plan different partitions for OS data and service data based on the scenario. Do not store all data in the same drive or partition. Properly planning drive partitions avoids or reduces the following risks: 1. Log files are too large and use up the space of the service driv...

Cisco IOS XE 操作系统命令注入漏洞

Cisco IOS XE is an operating system by Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from an operating system command injection vulnerability that stems...

The vulnerability of the microprogrammed control panel software for Honeywell MB-Secure and MB-Secure PRO devices arises from the lack of measures taken to neutralize special elements used in the operating system’s command sequence. This allows attackers to execute arbitrary commands with elevated privileges.

The vulnerability of the microprogrammed control panel software for Honeywell MB-Secure and MB-Secure PRO devices is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute...

Cisco IOS XE Software Privilege Escalation (cisco-sa-iosxe-privesc-su7scvdp)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

The vulnerability of the Flexible PIC Concentrator module’s operating system, Juniper Networks Junos OS, allows a hacker to trigger a maintenance failure.

The vulnerability of the Flexible PIC Concentrator FPC module of Juniper Networks’ Junos OS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted DHCP packet...

The vulnerability of the TCP protocol implementation in Juniper Networks’ Junos OS routers MX240, MX480, and MX960 allows a attacker to cause service interruptions.

The vulnerability of the TCP protocol implementation in Juniper Networks’ Junos OS routers of the MX240, MX480, and MX960 models is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially craft...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS routers of the MX series allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted GRE packets...

The vulnerability of the DHCP Daemon (jdhcpd) on Juniper Networks Junos OS allows a attacker to cause a service failure.

The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability of UserGate Next-Generation Firewall (NGFW) and UserGate Web Application Firewall (WAF) at the web application level arises from the failure to implement measures to neutralize specific elements. This allows attackers to execute arbitrary operating system commands with maximum privileges.

The vulnerability of UserGate Next-Generation Firewall NGFW and UserGate Web Application Firewall WAF at the web application level is related to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute any command on the...

The vulnerability of the anti-virus command in the Junos OS operating system’s SRX routers allows a hacker to cause a service failure.

The vulnerability of the Junos OS operating system’s SRX series router drivers relates to the absence of memory release after the effective lifespan of the devices. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...