SUSE: Security Advisory (SUSE-SU-2020:1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7719

Name of the Vulnerable Software and Affected Versions QEMU versions up to 6.0.0 Description A heap buffer overflow was found in the floppy disk emulator of QEMU. It could occur in fdctrl transfer handler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest...

Mozilla Thunderbird 竞争条件问题漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security bypass vulnerability exists in Mozilla Thunderbird, which can be exploited by...

GHSA-PW4V-GR34-2553 Sydent DoS (via resource exhaustion) due to improper input validation

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. For more information If you have any questions or comments about this advisory,...

Sydent DoS (via resource exhaustion) due to improper input validation

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. For more information If you have any questions or comments about this advisory,...

Denial Of Service (DoS)

matrixsydent is vulnerable to denial of service. Lack of validation of clientsecret and email parameters allows an attacker to cause excessive usage of disk space and memory via malicious input which can potentially lead to an application crash...

Denial Of Service (DoS)

matrixsydent is vulnerable to denial of service DoS. The vulnerability exists as the body of the HTTP request is not limited, nor to limit the response size, causing the exhaustion of both disk space, and memory...

QEMU 代码问题漏洞

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A code issue vulnerability exists in QEMU versions prior to 6.0.0 for SCSI Emulation Support. An attacker could exploit this...

CVE-2021-29433

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...

PYSEC-2021-24

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. Workarounds There are no known workarounds. References n/a For more information ...

CVE-2021-29433 Denial of service (via resource exhaustion) due to improper input validation

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...

CVE-2021-29433

Removed by vendor...

Matrix Sydent 输入验证错误漏洞

Matrix Sydent is an implementation of the Matrix Authentication Server API from the Matrix Foundation in the UK. Matrix Sydent suffers from an input validation error vulnerability that stems from the fact that the lack of input validation for certain parameters may lead to overuse of disk space a...

CVE-2021-0238

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches The issue is fixed by 9321. Workarounds Depending on the needs and configuration of the homeserver...

Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

Impact Missing input validation of some parameters on the groups also known as communities endpoints could cause excessive use of disk space and memory leading to resource exhaustion. Additionally clients may have issues rendering large fields. Patches This issue is fixed by 9321 and 9393...

GHSA-JRH7-MHHX-6H88 Denial of service (via resource exhaustion) due to improper input validation on groups/communities endpoints

Impact Missing input validation of some parameters on the groups also known as communities endpoints could cause excessive use of disk space and memory leading to resource exhaustion. Additionally clients may have issues rendering large fields. Patches This issue is fixed by 9321 and 9393...

PT-2021-2637 · Microsoft · Windows Wlan Autoconfig Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions prior to the fixed version Description: The issue is related to errors in security settings of the Windows WLAN service, allowing an attacker to gain unauthorized access to protected information. This...

CVE-2021-21393

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...

CVE-2021-21394

Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party...