PT-2024-11257 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been identified in the Linux kernel, specifically in the netlbl cipsov4 add std function. The memory leak occurs because the memory allocated for doi def-map.std is n...

AZL-7406 CVE-2021-22222 affecting package wireshark for versions less than 3.4.14-1

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

多款Qualcomm产品缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. Intrinsic component that provides the functionality of Qualcomm devices. A security vulnerability exists in Qualcomm products that could result in out-of-bounds reads in DRM due to incorrect buffer length checks. The following...

Timing attack against DSA

...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

Design/Logic Flaw

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

Ltd. Huawei digital security video transcoding access gateway information leakage vulnerabilities

Ltd. business scope includes: computer software, hardware and accessories technology development, sales, technical advice, technical maintenance; computer system integration; database. Shenzhen Huawei Digital Security Technology Co., Ltd. Huawei Digital Security video transcoding access gateway...

Weak Password Vulnerability in Bright Diamond IDS Networked Digital Signage Management System

Bright Diamond Technology is a technology innovation enterprise specializing in intelligent commercial hardware solutions, providing cost-effective turnkey solutions for customers. A weak password vulnerability exists in Bright Diamond's IDS Networked Digital Signage Management System, which can ...

Unauthorized Access Vulnerability in 51cloud Real-Time Cloud Rendering Platform

51WORLD is a digital twin platform company based on the original All Element Scene AES, integrating physical simulation, industrial simulation, artificial intelligence, cloud computing and other technologies to establish a digital twin application ecosystem, helping governments and enterprises to...

CVE-2021-33840

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

CVE-2021-33840

The CVE-2021-33840 issue affects Luca app up to v1.1.14, where Phone Number data is stored without a digital signature. This enables remote attackers to insert many fake COVID-19 records, causing a denial of service. Public documents confirm the vulnerability, its impact (DoS from mass fake recor...

Securing Privileged Access Within Healthcare Orgs

Healthcare organizations have always been high-value targets for cybercriminals, as their networks store large volumes of personally identifiable information PII including Social Security numbers, dates of birth, addresses and very sensitive personal health data. Since the beginning of the COVID-...

CVE-2021-33840: Insufficient Verification of Data Authenticity

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service insertion of many fake records related to COVID-19 because Phone Number data lacks a digital signature...

PT-2021-20342

Name of the Vulnerable Software and Affected Versions: Luca versions 1.1.14 and earlier Description: The issue allows remote attackers to cause a denial of service by inserting many fake records related to COVID-19. This is because Phone Number data lacks a digital signature. Recommendations: For...

FDCMS SQL Injection Vulnerability

FDCMS is a PHP-based content management system of Sichuan Method Digital Technology Co. A SQL injection vulnerability exists in FDCMS version 4.0. An attacker can use this vulnerability to inject malicious SQL via Admin/Lib/Action/FloginAction.class.php to obtain database records...

GHSA-89V2-G37M-G3FF Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Kids on the Web in 2021: Infinite creativity

For over a year weve been living in a world gripped by the COVID-19 pandemic. Not only has the pandemic affected peoples lifestyles, it has also accelerated the development and implementation of technologies that make it easier for us to complete everyday and work-related tasks. We no longer need...

PT-2021-7032

Name of the Vulnerable Software and Affected Versions ViPNet Client affected versions not specified Description The issue is related to a weakness in the digital signature verification of update files in the ViPNet Client software. This weakness can be exploited to install malicious software...

Gaining Insights Is Fundamental for API Security

As enterprises continue their digital transformation journey in this Post-COVID era, applications are the engine that drives their business growth. Whether it’s a digital-first enterprise or one that is accelerating its digital transformation initiatives, APIs are not only opening up systems so...