SDWAN Center : (CVE-1999-0517)SNMP Agent's Default Community string (PUBLIC) and SNMP 'GETBULK' Reflection DDoS

Vulnerability issue...

Mozilla Rust rocket crate competitive conditions issue vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...

SquirrelMail code issue vulnerability (CNVD-2021-29843)

SquirrelMail is a set of PHP language development , cross-platform Webmail mail system . A code issue vulnerability exists in the compose.php file in SquirrelMail version 1.4.22. The vulnerability stems from an improper design or implementation during code development for a web system or product...

CVE-2020-14400

An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16t pointers in libvncserver/translate.c. NOTE: Third parties do not consider this to be a vulnerability as there is no known path of exploitation or cross of a trust boundary...

PT-2020-4192

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.5 Description: The issue is related to the deserialization mechanism in the Jackson-databind library, specifically with the com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool...

Fortinet FortiClient EMS Code Issue Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A code issue vulnerability exists in the...

Lustre mdt module code issue vulnerability

Lustre is a parallel distributed file system typically used in large computer clusters and supercomputers, of which Lustre mdt is a module. A code issue vulnerability exists in the Lustre mdt module. The vulnerability stems from an improperly designed or implemented code development process for a...

PT-2020-6287 · Metinfo · Metinfo

Name of the Vulnerable Software and Affected Versions: Metinfo version 7.0.0 Description: The issue is related to a lack of access control in the /app/system/column/admin/index.class.php script of the Metinfo CMS system. This allows a remote attacker to escalate privileges by exploiting the...

DEBIAN-CVE-2010-2488

NULL pointer dereference vulnerability in ZNC before 0.092 caused by traffic stats when there are unauthenticated connections...

PT-2019-14590

Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description An issue was discovered in the function mdb env open2 where a divide-by-zero error occurs if mdb env read header obtains a zero value for a certain size field. This issue arises when accessing a data.mdb file...

Arbitrary File Upload

ABRT Automatic Bug Reporting Tool is vulnerable to arbitrary file upload. There is a flaw in moving problem reports between certain directories as abrt-handle-upload fails to verify that a new problem directory has appropriate permissions and did not contain symbolic links. A malicious problem...

PT-2018-17487 · Facebook · Folly +1

Name of the Vulnerable Software and Affected Versions: HHVM versions prior to 3.26.3 folly library versions between v2017.12.11.00 and v2018.08.09.00 Description: The issue is related to the folly::secureRandom function, which re-uses a buffer between parent and child processes when fork is calle...

CVE-2018-20511

An issue was discovered in the Linux kernel before 4.18.11. The ipddpioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAPNETADMIN to read the ipddproute dev and next fields via an SIOCFINDIPDDPRT ioctl call...

CURL-CVE-2018-1000301 RTSP bad headers buffer over-read

curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded content. When servers send RTSP responses back to curl, the data starts out with a set of headers. curl parses that data to separate it into a number of headers to deal with those appropriately an...

CVE-2018-7439

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in the function readminibiffnextrecord...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

PT-2014-2747 · Samba +1 · Ctdb +1

Name of the Vulnerable Software and Affected Versions: ctdb versions prior to 2.3 Description: The issue is related to the insecure creation of temporary files in ctdb, which has an unspecified impact. This is connected to several temporary file vulnerabilities found in various parts of the ctdb...

Slackware: Security Advisory (SSA:2008-183-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : libgdata (MDVSA-2012:111)

A vulnerability has been discovered and corrected in libgdata : It was found that previously libgdata, a GLib-based library for accessing online service APIs using the GData protocol, did not perform SSL certificates validation even for secured connections. An application, linked against the...

CVE-2012-3401

The t2preadtiffinit function in tiff2pdf tools/tiff2pdf.c in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a...