3602 matches found
NS-ASG application security gateway. Attackers exploit vulnerabilities
Beijing Wangkang Technology Co., Ltd. is a leading provider of n...
UBUNTU-CVE-2024-36902
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6rules: avoid possible NULL dereference in fib6ruleaction syzbot is able to trigger the following crash 1, caused by unsafe ip6dstidev use. Indeed ip6dstidev can return NULL, and must always be checked. 1 Oops: general...
edk2: Buffer overflow in the DHCPv6 client via a long Server ID option
A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...
SUSE CVE-2021-47572
In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled !CONFIGIPV6 we'll hit a NULL pointer dereference1 in the error path of nhcreateipv6 due to calling...
Apiris Kafeo 安全漏洞
Apiris Kafeo is a software solution from the French company Apiris. A security vulnerability exists in Apiris Kafeo version 6.4.4, which originates from a vulnerability that allows bypassing existing protections...
CI solution CI-Out-of-Office Manager 安全漏洞
CI solution CI-Out-of-Office Manager is a tool from CI solution for managing employee leave and out-of-office status. The solution is designed to streamline and automate the leave request, approval, and recording process to improve management efficiency in your organization. A security...
ASKEY 5G NR Small Cell 操作系统命令注入漏洞
The Askey 5G NR Small Cell is a 5G base station from China's Askey Electronic Technology Askey. An OS command injection vulnerability exists in ASKEY 5G NR Small Cell version V6, which stems from the inability to properly filter user input for certain functions, allowing an attacker to execute...
DEBIAN-CVE-2021-47572
In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled !CONFIGIPV6 we'll hit a NULL pointer dereference1 in the error path of nhcreateipv6 due to calling...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the iif in the IPv6 socket control block of the seg6 module...
SUSE CVE-2021-47291
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6nhflushexceptions While running the self-tests on a KASAN enabled kernel, I observed a slab-out-of-bounds splat very similar to the one reported in commit 821bbf79fe46 "ipv6: Fix KASAN:...
kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU
A flaw in the routing table size was found in the ICMPv6 handling of "Packet Too Big". The size of the routing table is regulated by periodic garbage collection. However, with "Packet Too Big Messages" it is possible to exceed the routing table size and garbage collector threshold. A user located...
OpenKM 安全漏洞
OpenKM is a document management system from the Spanish company OpenKM. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM 6.3.12 and earlier versions, which stems from a cross-site request forgery CSRF vulnerability ...
PT-2024-22878 · Unknown · Silverpeas Core
Name of the Vulnerable Software and Affected Versions: Silverpeas Core version 6.3 Description: The issue is related to Cross Site Scripting XSS via the ClipboardSessionController. This means an attacker could potentially inject malicious scripts into the website, affecting users' sessions...
SUSE CVE-2023-52698
In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...
CVE-2024-23522
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Strategy11 Form Builder Team Formidable Forms allows Code Injection.This issue affects Formidable Forms: from n/a through 6.7...
WordPress plugin Instant Images 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-18419 · Robotware · Robotware
Name of the Vulnerable Software and Affected Versions: RobotWare versions 6.00 through 6.15.05, except versions 6.10.10 and 6.13.07 RobotWare versions 7.00 through 7.13 Description: The issue allows an attacker to cause the robot to stop and make the robot controller inaccessible. It could...
PHPOK 安全漏洞
PHPOK is an enterprise website builder system that supports extensions. A security vulnerability exists in PHPOK version 6.4.003, which stems from vulnerability to SQL injection attacks...
PT-2024-15096 · WordPress · Wp Compress – Image Optimizer
Name of the Vulnerable Software and Affected Versions: WP Compress – Image Optimizer versions up to, and including, 6.20.01 Description: The issue is related to insufficient validation on the redirect URL supplied via the css parameter, allowing unauthenticated attackers to redirect users to...