CVE-2020-8295

A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user...

OpenLDAP Assertion Failure Vulnerability (CNVD-2021-06637)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd assertion failure vulnerability exists in saslAuthzTo authentication in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of service...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.1.1. The vulnerability stems from a lack of program soundness and may read uninitialized memory. No details of the vulnerability are provided at this...

Rust 代码问题漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.3.0. The vulnerability stemmed from a dereference of a raw pointer, which could be exploited by an attacker to cause an arbitrary memory address to be...

OpenLDAP has an unspecified vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd security vulnerability exists in the X.509 DN parsing of decode.c bernextelement in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of servic...

UBUNTU-CVE-2021-23963

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox 85...

PT-2021-5555 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.57 Description: The issue is related to an insufficient use of the assert function in the open implementation of the OpenLDAP protocol. It may allow a remote attacker to execute a denial of service attack by...

PT-2021-13845 · Privoxy +3 · Privoxy +3

Name of the Vulnerable Software and Affected Versions: Privoxy versions prior to 3.0.29 Description: A flaw was found in Privoxy. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash. Recommendations: For versions prior...

Honeywell OPC UA Tunneller Buffer Error Vulnerability

Honeywell OPC UA Tunneller is a Honeywell application that provides reliable OPC UA connectivity across devices and domains. Honeywell OPC UA Tunneller All versions prior to 6.3.0.8233 A buffer error vulnerability exists that could allow an attacker to disclose sensitive information, remotely...

PT-2021-8018

Name of the Vulnerable Software and Affected Versions PySAML2 versions prior to 6.5.0 Description The issue is related to an improper verification of cryptographic signatures, specifically a variant of XML Signature wrapping. This occurs because PySAML2 does not validate SAML documents against an...

CVE-2021-2007

Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise...

UBUNTU-CVE-2021-2131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Google Chrome Security UI Incorrect Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An incorrect security UI vulnerability exists in Page Info in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to spoof t...

Cisco DNA Center 安全漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. An information disclosure vulnerability exists in the Configuration Archiving feature in Cisco DNA Center versions prior to 2.1.2.0. The vulnerability stems from the fact that configuration archive files are stored in...

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A USB uninitialized use vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A local attacker may be able to perform out-of-scope memory access...

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A data validation insufficiency vulnerability exists in V8 in versions prior to Google Chrome 88.0.4324.96. An attacker can exploit this to perform out-of-range...

Google Chrome Cryptohome Policy Enforcement Deficiency Vulnerability (CNVD-2021-30150)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Cryptohome policy enforcement deficiency vulnerability exists in Google Chrome versions prior to 88.0.4324.96. An attacker can execute OS-level privilege escalati...

Oracle VM VirtualBox (Jan 2021 CPU)

The Prior to 6.1.18 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2021 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected ...

Jointjs Code Issue Vulnerability

A code issue vulnerability exists in jointjs before 3.3.0 that stems from a denial of service DoS attack on the unsetByPath function...

Oracle Virtualization 组件访问控制错误漏洞

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. An access control error vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit this vulnerability to compromise confidentiality and integrity...