Netgear RBR750和NETGEAR 命令注入漏洞

Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from the fact that...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that stems from the fact that some NETGEAR devices are subject to command back...

sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

ALBA-2021:5228 sssd bug fix and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

Improper Authentication

Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngxhttpauthrequestmodule with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect...

The vulnerability of the BFCache component in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the BFCache component in Microsoft Edge and Google Chrome is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions...

Improper Privilege Management in dotcms/core

Description Hello team, I found a SSTI that allow me to get Full Privilege Escalation system user 1. While editing a template we have total access to the User and UserModel classes via $user 2. One of the UserModel methods is called setUserId 3. If we call setUserId and pass "system" as parameter...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A heap buffer overflow vulnerability exists in the BFCache component of Google Chrome versions prior to 96.0.4664.93. Detailed vulnerability details are not available at this time...

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

GSD-2021-1002047 powerpc/idle: Don't corrupt back chain when going idle

powerpc/idle: Don't corrupt back chain when going idle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

GSD-2021-1002009 powerpc/idle: Don't corrupt back chain when going idle

powerpc/idle: Don't corrupt back chain when going idle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

PT-2021-30474

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26648

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue is related to the powerpc/idle component, where the back chain can be corrupted when the system goes idle. The actual impact and attack plausibility have not yet been proven...

PT-2021-26479

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A potential issue exists where the back chain may be corrupted when the system goes idle. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30574

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For versio...

PT-2021-26517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-30512

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the powerpc/idle component, where going idle can corrupt the back chain. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...