293 matches found
CVE-2021-29443
jose is an npm library providing a number of cryptographic operations. In vulnerable versions AESCBCHMACSHA2 Algorithm A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 decryption would always execute both HMAC tag verification and CBC decryption, if either failed JWEDecryptionFailed would be thrown. A...
jose 安全漏洞
npm jose is an application from the U.S. company npm. Use native encryption runtime does not depend on the item JWA, JWS, JWE, JWT, JWK. A security vulnerability exists in npm jose that stems from a possible timing difference when a padding error occurs while decrypting a ciphertext. No detailed...
Linux kernel difference-one error vulnerability (CNVD-2021-29475)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A difference-one error vulnerability exists in kernel/bpf/verifier.c in Linux kernel versions prior to 5.11.8. An...
Linux kernel 安全漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A difference-one error vulnerability exists in kernel/bpf/verifier.c in Linux kernel versions prior to 5.11.8. An...
High Availability Synchronization on NetScaler Appliance
This article contains information about synchronization between appliances that are part of a high availability setup. Background High availability synchronization is the process by which configurations are kept identical between the appliances. It is not the process that runs individual commands...
a_r_c_h_e_r_y (>=0.4.1, <=0.4.3), abci-storage (0.0.3) +1692 more potentially affected by unknown CVE via difference (>=0.4.1, <=2.0.0)
difference CARGO version =0.4.1, =0.4.1, =0.1.1, =0.1.0, =0.1.0, =4.1.0, =0.6.0, =0.1.0, =0.1.25, =2.0.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0095...
Can Edge Computing Exist Without the Edge? Part 2: Edge Computing
In part 1 of this series, I drew the architectural distinction between a centralized cloud platform and a distributed edge network. This is an important foundation upon which to explain the difference between cloud computing and edge computing. The two serve very different and complementary...
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code...
Citrix ADC FIPS Compliance/Validation FAQ
General Overview 1. What are Federal Information Processing Standards FIPS? FIPS are standards and guidelines for federal computer systems that are developed by National Institute of Standards and Technology NIST in accordance with the Federal Information Security Management Act FISMA and approve...
Friday Squid Blogging: Calamari vs. Squid
St. Louis Magazine answers the important question: "Is there a difference between calamari and squid?" Short answer: no. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...
AZL-44778 CVE-2020-14019 affecting package python-rtslib 2.1.fb69-9
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and thus permissions are not preserved...
CVE-2019-12623
A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform file enumeration on an affected system. The vulnerability is due to the web server responding with different...
ImageMagick stack buffer overflow vulnerability (CNVD-2019-29232)
ImageMagick Studio ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A stack buffer overflow vulnerability exists in WritePNMImage in coders/pnm.c in ImageMagick 7.0.8-50 Q16. The vulnerability stems from a strncpy misalignment and the...
CVE-2019-0259
CVE-2019-0259 relates to SAP BusinessObjects (versions 4.2 and 4.3) and is a vulnerability where an attacker can upload arbitrary files, including scripts, due to insufficient file format validation. The root cause is inadequate validation during the file upload process, enabling remote, unauthen...
CVE-2019-0259
SAP BusinessObjects, versions 4.2 and 4.3, Visual Difference allows an attacker to upload any file including script files without proper file format validation...
Information Disclosure
openssh is vulnerable to information disclosure attacks. The vulnerability exists as sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users ...
Low, Medium and High Interaction Honeypot Security
Honeypots are a popular way to protect data centers and learn about attackers. Learn the difference between high and low interaction honeypot security...
Veeam Availability Orchestrator cannot add vCenter Server or standalone host due to time difference
Challenge When you try to add a VMware vCenter Server or a standalone VMware ESXi with a different time zone, the operation may fail with an error informing that time difference between Veeam Availability Orchestrator and the remote host is too large. Solution To resolve the issue, follow the nex...
Citrix License Server system clocks is not synchronized with the Delivery Controller
If the system clock time difference between Delivery Controller and License Server is is greater than maximum allowed 5 minutes, License Server might not work properly...