10725 matches found
PT-2021-26093
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.73 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-26049
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-26019
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-26156
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-30151
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-30044
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.153 Description The issue is related to the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-30014
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.211 Description The issue concerns the freeing of an uninitialized misc IRQ vector in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
Vim buffer error vulnerability
Vim is a UNIX-based editor. Vim is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a heap buffer overflow...
CVE-2021-23449
The CVE-2021-23449 entry concerns the Node.js vm2 package (pre-3.9.4). A Prototype Pollution flaw allows an attacker to modify Object.prototype via proto /constructor payloads, which can lead to sandbox escape and execution of arbitrary code on the host. Impact is described as remote code executi...
Command injection
LedgerSMB does not set the 'Secure' attribute on the session authorization cookie when the client uses HTTPS and the LedgerSMB server is behind a reverse proxy. By tricking a user to use an unencrypted connection HTTP, an attacker may be able to obtain the authentication data by capturing network...
Juniper Networks Junos OS security vulnerabilities
Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an access control error, which results from a specific...
CVE-2021-40499
Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...
Libqt buffer error vulnerability
Libqt is an open source software package. A buffer error vulnerability exists in Libqt that originates when rendering and displaying carefully crafted Scalable Vector Graphics SVG files; this flaw could lead to unauthorized memory access. The greatest threat of this vulnerability is data...
Alkacon OpenCms code-related vulnerabilities
Alkacon OpenCms is an open source content management system CMS developed in Java.Alkacon OpenCms is vulnerable to an XML external entity vulnerability that can be exploited by attackers to steal files from the server's file system by uploading crafted SVG documents...
SUSE: Security Advisory (SUSE-SU-2021:3289-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-25490
A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process...
Security Bulletin: Netty Vulnerabilities Affect the B2B API of IBM Sterling B2B Integrator
Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID: CVE-2019-20445 DESCRIPTION: Netty could provide weaker than expected security, caused by non-proper handling of Content-Length and Transfer-Encoding in the HttpObjectDecoder.java. A remote...
CVE-2021-37330
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting XSS. The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigge...
CVE-2021-37330
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting XSS. The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigge...