Design/Logic Flaw

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371 Regular Expression Denial of Service (ReDoS)

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces...

Npm chrono-node 安全漏洞

Npm chrono-node is an application from Npm USA. Used to handle most date/time formats and extract information from any given text. A security vulnerability exists in Chrono-node prior to version 2.2.4, which stems from the program hanging on date-like strings with a large number of embedded space...

samba: Out of bounds read in AD DC LDAP server

A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

UBUNTU-CVE-2020-27840

A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability...

CVE-2021-26880

Storage Spaces Controller Elevation of Privilege Vulnerability...

CVE-2021-26880

Storage Spaces Controller Elevation of Privilege Vulnerability...

Privilege escalation

Storage Spaces Controller Elevation of Privilege Vulnerability...

CVE-2021-26880 Storage Spaces Controller Elevation of Privilege Vulnerability

...

CVE-2021-26880

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-26880 are not provided in the connected documents. The initial description remains high‑level; monitor for updates and new disclosures.

Storage Spaces Controller Elevation of Privilege Vulnerability

...

PT-2021-2421

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller driver for Windows operating systems. This vulnerability is...

Regular Expression Denial of Service (ReDoS)

Overview chrono-node is an A natural language date parser in Javascript Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. It hangs on a date-like string with lots of embedded spaces. Details Denial of Service DoS describes a family of attacks, all aim...

DEBIAN-CVE-2021-21240

httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of "\xa0" characters in the "www-authenticate" header may cause Denial of Service CPU burn while parsing header of the httplib2 client accessing said...

CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP

The Cloud Filter driver, cldflt.sys, on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IOFORCEACCESSCHECK or OBJFORCEACCESSCHECK flags when calling FltCreateFileEx and FltCreateFileEx2 within its HsmpOpCreatePlaceholders function with attacker controlled input. Th...

GHSA-HQ37-853P-G5CF Regular Expression Denial of Service in CairoSVG

Doyensec Vulnerability Advisory Regular Expression Denial of Service REDoS in cairosvg Affected Product: CairoSVG v2.0.0+ Vendor: https://github.com/Kozea Severity: Medium Vulnerability Class: Denial of Service Authors: Ben Caller Doyensec Summary When processing SVG files, the python package...

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points allows a hacker to execute arbitrary commands.

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor...

Cisco DNA Spaces Connector Command Injection Vulnerability (cisco-sa-dna-cmd-injection-rrAYzOwc)

A command injection vulnerability exists in Cisco DNA Spaces Connector due to insufficient validation of user-supplied input in the web-based management interface. An unauthenticated, remote attacker can exploit this, by sending crafted HTTP requests to the web-based management interface, to...