778 matches found
CVE-2021-28166
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...
CVE-2021-28166
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...
CVE-2021-28166
Eclipse Mosquitto broker (versions 2.0.0–2.0.9) is vulnerable to a NULL pointer dereference when an authenticated client that previously connected with MQTT v5 sends a crafted CONNACK message. Affected component: broker handling CONNACK under MQTT v5. Impact as per sources: availability impact HI...
CVE-2021-28166
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...
PT-2021-17785
Name of the Vulnerable Software and Affected Versions: Eclipse Mosquitto versions 2.0.0 through 2.0.9 Description: The issue occurs when an authenticated client connected with MQTT v5 sends a crafted CONNACK message to the broker, resulting in a NULL pointer dereference. Recommendations: For...
CVE-2021-28166: NULL Pointer Dereference
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...
Security Bulletin: IBM API Connect V5 Developer Portal is vulnerable to cross-site scripting (CVE-2020-4838)
Summary IBM API Connect has addressed the following vulnerability Vulnerability Details CVEID: CVE-2020-4838 DESCRIPTION: IBM API Connect is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...
CVE-2020-25494
Xinuos formerly SCO Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook...
Arbitrary File Download Vulnerability in Zhiyuan A8-V5 Collaboration Management Software
Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet is a high-tech enterprise integrating product design, research and development, sales and service, providing customers with professional collaborative management software products, solutions, platforms and cloud services, and is a...
Backup repository upgrade fails after upgrading to v5
Challenge A local backup repository fails to upgrade after upgrading to Veeam Backup for Microsoft 365 5.0 version 5.0.0.1061. Cause In case when the Team Chat folder has been protected with the earlier version of Veeam Backup for Microsoft 365, a backup repository may contain items with several...
[SECURITY] Fedora 32 Update: krb5-1.18.2-29.fc32
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...
Fedora: Security Advisory for krb5 (FEDORA-2020-27b577ab23)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for krb5 (FEDORA-2020-32193cbbe6)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Moderate: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c CVE-2019-15917 kernel: out-of-bounds access in...
CVE-2020-24376
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...
CVE-2020-24374
A DNS rebinding vulnerability in Freebox v5 before 1.5.29...
Design/Logic Flaw
A DNS rebinding vulnerability in Freebox v5 before 1.5.29...
Design/Logic Flaw
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...