Input validation

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

CVE-2021-25663

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

Design/Logic Flaw

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

CVE-2021-25664

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

CVE-2021-25663

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, Nucleus NET All versions, Nucleus ReadyStart V3 All versions V2017.02.4, Nucleus ReadyStart V4 All versions V4.1.0, Nucleus Source Code All versions...

PT-2021-16739 · Mentor Graphics · Nucleus Readystart +3

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus ReadyStart V4 versions prior to V4.1.0 Nucleus...

Weak Password Vulnerability in AR Web Management Platform

Huawei Technologies Limited operates in the areas of switches, transmission equipment, data communication equipment, broadband multimedia equipment, power supply, wireless communication equipment, microelectronic products and software. A weak password vulnerability exists in the AR Web management...

DEBIAN-CVE-2021-20197

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user presumably as part of a script updating binaries across different users, an unprivileged user can tric...

Weak password vulnerability in Huawei AR Web Management Platform (CNVD-2021-25876)

Huawei Technologies Co., Ltd, founded in 1987, is headquartered in Longgang District, Shenzhen, Guangdong Province. 1 Huawei is a leading global information and communications technology ICT solutions provider, specializing in the ICT field, adhering to sound management, continuous innovation and...

Weak Password Vulnerability in Huawei AR Web Management Platform

Huawei Technologies Co., Ltd, founded in 1987, is headquartered in Longgang District, Shenzhen, Guangdong Province. 1 Huawei is a leading global information and communications technology ICT solutions provider, specializing in the ICT field, adhering to sound management, continuous innovation and...

The vulnerability of the elf_end function in the libelf library, a set of utilities for processing ELF objects, relates to the issue of allowing the output operation to be within acceptable data buffer limits. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the elfend function in the libelf library is related to improper closure of the ar file. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Can Edge Computing Exist Without the Edge? Part 3: The Economics of Edge Computing

Do the math. For the past decade, digital businesses have been investing in digital transformation initiatives. The promise is to increase top-line growth while maximizing customer lifetime value. As infrastructure improves, IT spending is shifting from the cloud to the edge. But while edge...

Debian DSA-4808-1 : apt - security update

It was discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could cause out-of-bounds reads or infinite loops, resulting in denial of service when processing malformed deb files. C Tenable Network Security, Inc. The descriptive text and...

PT-2021-7939

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.35 and earlier Description The issue is related to an open race window when writing output in certain utilities, including ar, objcopy, strip, and ranlib. This can be exploited by an unprivileged user to trick these...

Pixar OpenUSD Binary File Format Compressed Value Reps Code Execution Vulnerabilities

Summary A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to acce...

CVE-2018-8062

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...

CVE-2018-8062

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...

Cross site scripting

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...

CVE-2018-8062

CVE-2018-8062 affects the Comtrend AR-5387un router family (firmware A731-410JAZ-C04_R02.A2pD035g.d23i). The vulnerability is an XSS flaw in the WAN Service Description parameter during WAN service creation, enabling injection of arbitrary script/HTML. Public sources describe a persistent XSS var...

CVE-2018-8062

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...