CVE-2021-0264

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-31571

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation...

April 22, 2021—KB5001384 (OS Build 17763.1911) Preview

None None...

KB5001407: Servicing stack update for Windows 10, version 1809: April 22, 2021

None None...

April 22, 2021—KB5001396 (OS Build 18363.1533) Preview

None None...

KB5003155: Servicing stack update for Windows 10, version 1909: April 22, 2021

None None...

Trend Micro Antivirus for Mac 安全漏洞

Trend Micro Antivirus is a professional anti-virus application developed by Trend Micro, a globally recognized leader in computer security.Trend Micro Antivirus for Mac is the Mac version. An elevation of privilege vulnerability exists in Trend Micro Antivirus for Mac versions 2020 v10.5, 2021 v1...

GHSA-893H-35V4-MXQX Path Traversal in Ansible

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

CVE-2020-14105

The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI 2020.01.15...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle E-Busines...

Oracle Solaris 安全漏洞

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris version 10. An attacker could exploit this vulnerability to compromise Oracle Solaris by allowing a low-privileged attacker to log in to the infrastructure...

PT-2021-16751

Name of the Vulnerable Software and Affected Versions AdTran Personal Phone Manager version 10.8.1 Description The issue allows for exfiltration of data over DNS, potentially enabling exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS...

Oracle Applications Framework 安全漏洞

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...

Oracle E-Business Suite Oracle Trade Management Quotes 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite.Oracle Trade...

GHSA-JMX8-355M-8VWH Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11

Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2 allows attacker to update element property values via crafted synchronization message. - https://vaadin.com/security/cve-2018-25007...

HPESBHF04116 rev.3 - HPE Gen10 and Gen10 Plus Servers, GRUB2 Secure Boot Vulnerability, Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VMware Upgrade Pack VUP 1.4.1, VUP 1.4.2 - See link to Software Delivery Repository - vibsdepot in Resolution Scripting Toolkit for Linux - Prior to version 11.5121 Apr 20...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-27604

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Enterprise Service Repository JAVA Mappings, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note...

CVE-2021-27604

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Enterprise Service Repository JAVA Mappings, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note...

HPE IceWall SSO 跨站脚本漏洞

HPE IceWall SSO is a single sign-on program from Hewlett Packard Enterprise hpe that provides authentication capabilities to users. A cross-site scripting vulnerability exists in HPE IceWall SSO Domain Gateway and affects the following products and versions: HPE IceWall SSO Domain Gateway 10.0 on...