SUSE: Security Advisory (SUSE-SU-2019:0137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-29058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.41 Description The issue is related to the sja1105 setup function in the Linux Kernel, specifically in the net: dsa: sja1105 component. It lacks proper error handling, which may potentially lead to...

PT-2021-29014

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.8 Description The issue is related to the sja1105 setup function in the Linux Kernel, where error handling has been added. The actual impact and attack plausibility have not yet been proven...

PT-2021-25020

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.8 Description: The issue is related to the sja1105 setup function in the Linux Kernel, where error handling has been added. The actual impact and attack plausibility have not yet been proven...

PT-2021-25064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.41 Description The issue is related to the sja1105 setup function in the Linux Kernel, specifically in the net: dsa: sja1105 component. It lacks proper error handling, which may potentially lead to...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-39688)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in the "Setup News" module in the admin panel of CMS Made Simple version 2.2.14. An attacker can exploit this vulnerability to...

Exim Buffer Overflow Info Disclosure

The vulnerability of the smtpsetupmsg function in the Exim message forwarding agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information by sending a specially crafted message to t...

Fastspot BigTree 操作系统命令注入漏洞

BigTree CMS is an open source content management system based on PHP and MySQL. A remote code execution vulnerability exists in BigTree CMS 4.4.10 and earlier versions. The vulnerability can be exploited to execute arbitrary commands by sending a specially crafted request to the server via the...

CMS Made Simple 跨站脚本漏洞

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in the "Setup News" module in the admin panel of CMS Made Simple version 2.2.14. An attacker can exploit this vulnerability to...

Schneider Electric spaceLYnk和homeLYnk 信息泄露漏洞

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. Schneider Electric homeLYnk and spaceLYnk are vulnerable to an information disclosure vulnerability that could result in the program being corrupted...

PT-2024-11206 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, where a vulnerability has been resolved by adding error handling in the sja1105 setup function. If any of the sja1105 static config load,...

PT-2022-1369 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the Linux kernel’s io uring subsystem, allowing a local user to crash or escalate their privileges on the system. This issue is related to the way a...

hostapd: UPnP SUBSCRIBE misbehavior in WPS AP

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue...

ALBA-2021:1864 initial-setup bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

initial-setup bug fix and enhancement update

An update is available for initial-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

ALBA-2021:1785 gnome-initial-setup bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

gnome-initial-setup bug fix and enhancement update

An update is available for gnome-initial-setup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...

PT-2024-11288 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-rc1-00144-g25a1298726e 13 Description: A vulnerability in the Linux kernel has been resolved, specifically in the isdn: mISDN: netjet module. The issue arises when 'nj setup' in netjet.c fails with -EIO,...

CVE-2021-20025

SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the...

CVE-2021-20025

SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the...