PT-2022-1425

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 21.007.20099 and earlier Adobe Acrobat Reader DC versions 20.004.30017 and earlier Adobe Acrobat Reader DC versions 17.011.30204 and earlier Adobe Acrobat 2017 affected versions not specified Adobe Acrobat Read...

Adobe Acrobat Reader Dc 信息泄露漏洞

Adobe Acrobat is a set of PDF file editing and conversion tools from the U.S. Adobe Acrobat Reader DC ActiveX space is vulnerable to information disclosure, which stems from errors in the configuration of the network system or product during operation. An unauthenticated attacker could exploit th...

ipa, python2 security update

CentOS Errata and Security Advisory CESA-2021:5195 An update for ipa is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

samba security and bug fix update

4.10.16-17 - related: 2019673 - Add missing checks for IPA DC server role 4.10.16-16 - resolves: 2019661 - Fix CVE-2016-2124 - resolves: 2019673 - Fix CVE-2020-25717 - resolves: 2021428 - Add missing PAC buffer types to krb5pac.idl...

Oracle Linux 7 : ipa (ELSA-2021-5195)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-5195 advisory. 4.6.8-5.0.1 - Blank out header-logo.png product-name.png - Replace login-screen-logo.png Orabug: 20362818 4.6.8-5.el79.10 - Resolves: 2025848 - RHEL 8.6 IPA...

Moderate: Red Hat Security Advisory: idm:DL1 security update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

idm:DL1 security update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Exploit for CVE-2021-42278

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impers...

Security fix for the ALT Linux 10 package samba version 4.14.10-alt3

Dec. 13, 2021 Evgeny Sinelnikov 4.14.10-alt3 - Update for the latest fixes release of Samba 4.14 + CVE-2020-25727 idmapnss, krb5 and s3-auth regressions + CVE-2021-3670 ldapserver, dsdb/anr and ldb libldb-2.3.2-alt2 regressions + smbd: s3-dsgetdcname: handle numips == 0 + dsdb: Use...

CVE-2021-26777

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

Buffer overflow

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

CVE-2021-26777

CVE-2021-26777 concerns a buffer overflow in SetFirewall within index.cgi of Circutor Compact DC-S BASIC smart metering concentrator firmware CIR_CDC_v1.2.17. The flaw stems from improper data boundary handling, enabling an attacker to execute arbitrary code remotely via the device’s network inte...

PT-2021-17131

Name of the Vulnerable Software and Affected Versions CIRCUTOR COMPACT DC-S BASIC smart metering concentrator version CIR CDC v1.2.17 Description The issue is related to a buffer overflow vulnerability in the SetFirewall function within index.cgi of the CIRCUTOR COMPACT DC-S BASIC smart metering...

CVE-2021-26777: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIRCDCv1.2.17, allows attackers to execute arbitrary code...

CVE-2021-0148

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0148: Insertion of Sensitive Information into Log File

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

PT-2021-12924

Name of the Vulnerable Software and Affected Versions: IntelR SSD DC affected versions not specified Description: The issue allows a privileged user to potentially enable information disclosure via local access due to the insertion of information into a log file in the firmware for some IntelR SS...

Samba permission permission and access control issue vulnerability (CNVD-2022-15498)

Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...