70 matches found
Denial of Service (DoS)
Overview apple/swift-nio-http2 is a HTTP/2 support for SwiftNIO. Affected versions of this package are vulnerable to Denial of Service DoS. This can be caused by a network peer sending ALTSVC or ORIGIN frames, due to a logical error after frame parsing but before frame handling. Details Denial of...
Integer Overflow or Wraparound
Overview apple/swift-nio-http2 is a HTTP/2 support for SwiftNIO. Affected versions of this package are vulnerable to Integer Overflow or Wraparound. This can result in a DoS, caused by a network peer sending a specially crafted HPACK-encoded header block. Remediation Upgrade apple/swift-nio-http2...
CVE-2021-36222 affecting package krb5 for versions less than 1.19.2-1
CVE-2021-36222 affecting package krb5 for versions less than 1.19.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22957
A Cross-Origin Resource Sharing CORS vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect applicati...
PT-2021-15297 · Ubiquiti · Unifi Protect
Name of the Vulnerable Software and Affected Versions: UniFi Protect versions 1.19.2 and earlier Description: A Cross-Origin Resource Sharing CORS issue allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over the user's account. Recommendation...
Security fix for the ALT Linux 10 package krb5 version 1.19.2-alt1
1.19.2-alt1 built July 26, 2021 Ivan A. Melnikov in task 280684 --- July 25, 2021 Ivan A. Melnikov - 1.19.2 Fixes: CVE-2021-36222...
PT-2021-3744 · Oracle +11 · Mysql Server +10
Name of the Vulnerable Software and Affected Versions: MIT Kerberos 5 krb5 versions prior to 1.18.4 MIT Kerberos 5 krb5 versions 1.19.x prior to 1.19.2 MySQL Server versions 8.0.26 and earlier Description: The issue is related to a NULL pointer dereference in the Key Distribution Center KDC...
MediaWiki Multiple Vulnerabilities (Aug 2012) - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
UBUNTU-CVE-2017-13089
The http.c:skipshortbody function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then...