UVI-2021-1001037 RDMA: Verify port when creating flow rule

RDMA: Verify port when creating flow rule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

GSD-2021-1001037 RDMA: Verify port when creating flow rule

RDMA: Verify port when creating flow rule This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.11 by commit...

PT-2021-25508

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.12 through v5.12.10 Description: The issue is related to RDMA, where the port is not properly verified when creating a flow rule. This is an automated ID intended to aid in discovery of potential security...

PT-2021-8250 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the netfilter component of the Linux kernel, specifically in the nf tables module. This occurs when the chain-flags & NFT CHAIN HW...

Huawei Data Communication: No password rule is configured

If the password check policy is disabled, you can configure simple passwords to increase the risk of brute force cracking. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

CVE-2021-32928

The CVE-2021-32928 issue affects the Sentinel LDK Run-Time Environment (RTE) installer for version 7.6 and prior. The root cause is the installer adding a firewall rule named “Sentinel License Manager” that permits inbound connections from private networks on TCP port 1947, and the uninstaller fa...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

PT-2021-19976

Name of the Vulnerable Software and Affected Versions Sentinel LDK Run-Time Environment versions 7.6 and prior Description The issue arises from the Sentinel LDK Run-Time Environment installer, which adds a firewall rule named "Sentinel License Manager" allowing incoming connections from private...

CVE-2021-32928: Incomplete Cleanup

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

lua-resty-waf

This is a Lua library for building a web application firewall WAF on top of the OpenResty stack. The library is called "lua-resty-waf" and is maintained by Robert Paprocki p0pr0ck5. The library provides a set of APIs for loading and managing rules, as well as for logging and storing data. It also...

PT-2024-11271

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to RDMA: Verify port when creating flow rule. The issue arises from a missing check in the mlx5 ib driver, which could caus...

Objective Open CBOR Run-time 安全漏洞

Objective Open CBOR Run-time oocborrt is an open source C code library. It should be used for coding and decoding functions for data in the CBOR format. A security vulnerability exists in run-time that stems from. The run-time environment installer adds a firewall rule called Sentinel License...

PT-2021-18655

Name of the Vulnerable Software and Affected Versions Apache Dubbo versions prior to 2.7.9 Description The issue allows arbitrary constructors to be called when parsing YAML rules used for Tag routing. This routing is utilized by customers to direct requests to the appropriate server, relying on...

CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected...

CVE-2021-20177

A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected...

Monitor Windows Registry Changes with Qualys File Integrity Monitoring

With Windows registries storing a large number of programs and OS security settings and a large amount of raw data, threat actors have begun to use those registries as a data store for their malicious activity. It is therefore imperative for organizations to monitor changes in Windows registries ...

Sifchain: Misconfiguration Certificate Authority Authorization Rule

Hello,Sifchain Security Team, I found a bug called Missing CAA. Certificate Authority Authorization supported by LetsEncrypt and other CAs allows a domain owner to specify which Certificate Authorities should be allowed to issue certificates for the domain. All CAA-compliant certificate authoriti...