UBUNTU-CVE-2021-39261

A crafted NTFS image can cause a heap-based buffer overflow in ntfscompressedpwrite in NTFS-3G 2021.8.22...

LSN-0079-1 Kernel Live Patch Security Notice

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.CVE-2021-3600 It was discovered that the virtual file system...

CVE-2021-32542

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token that triggered the attack...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to achieve...

PT-2021-2648 · Siemens +1 · Simotics Connect 400 +7

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET affected...

The vulnerability of the file system component of the IBM Spectrum Scale data storage management software allows a attacker to trigger a service failure.

The vulnerability of the file system component of the IBM Spectrum Scale data storage management software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by executing processes like...

EAP: Vault system property security attribute value is revealed on CLI 'reload' command

A flaw was found in the JBoss EAP Vault system. Confidential information of the system property’s security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information...

D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Exploit Author: huzaifa hussain Vendor Homepage: https://in.dlink.com/ Version: DIR-615 T1 ver:20.10 Tested on: D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" &...

kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence

A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the...

Xi'an Baolian Network Technology Co., Ltd. construction system has logical flaws and vulnerabilities

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. There is a logic flaw vulnerability in the construction system of Xi'an Bailian Network Technology Co. Attackers take...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38563)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Zhengzhou Wolf Smoke Network Technology website construction system has SQL injection vulnerabilities

Zhengzhou Wolf Smoke Network Technology Limited a professional website design, production, operation service provider. Zhengzhou Wolf Smoke Network Technology website construction system has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

The vulnerability of the authentication mechanism of the Secure Shell service for the Cisco IOS XR operating system allows a perpetrator to gain access to a vulnerable device.

The vulnerability of the SSH authentication mechanism in Cisco IOS XR operating systems is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to vulnerable devices remotely...

Apple macOS Print Server Message Content Replacement Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. A print server message content replacement vulnerability exists in the CUPS component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6. In certain configurations, a remote attacker can exploit this vulnerability t...

The vulnerability of the NTFS file system implementation in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system implementation in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

SUSE-SU-2018:0994-1 Security update for the Linux Kernel (Live Patch 30 for SLE 12)

This update for the Linux Kernel 3.12.61-52111 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...

MGASA-2018-0187 Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.30 and fixes at least the following security issues: The KPTI mitigation for Meltdown CVE-2017-5754 on 32bit x86 has been updated to revision 4. A flaw was found in the Linux kernel implementation of 32 bit syscall interface for bridging allowing a...

Design/Logic Flaw

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...

Evergreen Information Disclosure Vulnerability

Evergreen is an open source, highly scalable library system ILS developed by the Evergreen community. The system helps patrons find library materials and helps with library management, organizing catalogs, and distributing those materials, among other things. A security vulnerability exists in th...

Logical design flaws in mallbuilder e-commerce system

MallBuilder is a multi-user online shopping mall solution based on PHP + MYSQL. A logical design vulnerability exists in the mallbuilder e-commerce system. An attacker can exploit this vulnerability to modify database information...