Huawei HarmonyOS Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to affect service availability...

UBUNTU-CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file...

Wireshark security vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Gryphon dissector is one of the Gryphon protocol parsers. A security vulnerability exists in...

Celery Command Injection Vulnerability

celery is an open source package for distributed task queues. A command injection vulnerability exists in celery versions prior to 5.2.2, which can be exploited by an attacker to access or somehow manipulate metadata in the celery backend, triggering a stored command injection vulnerability...

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

PYSEC-2021-867

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

Remote code execution

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

CVE-2021-43857

CVE-2021-43857 affects Gerapy, a distributed crawler management framework. Affected versions prior to 0.9.8 are vulnerable to remote code execution due to an OS command injection flaw in the spider/config flow. The issue is patched in version 0.9.8; users should upgrade to 0.9.8 or later to mitig...

Huawei HarmonyOS incorrect authentication vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS, which stems from a component of the product that does not effectively authenticate users. An attacker could...

Huawei HarmonyOS APK unverified signature during installation vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to isolate and read synchronization files from other applications via UID sandboxing...

Huawei HarmonyOS Coding Timing Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to cause a denial of service...

Apache Storm Code Execution

The vulnerability of the software platform services for distributed stream processing Apache Storm is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

Emerson Electric Emerson DeltaV Distributed Control System Access Control Vulnerability

Emerson Electric Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson Electric. The system includes features such as network security management, alarm management, batch control, and change management. An access control error vulnerability exists in...

Atomix Resource Management Error Vulnerability

Atomix is an embeddable library that helps achieve fault tolerance and consistency for distributed resources. It provides a rich set of APIs for managing its resources, such as collections, groups, and concurrent tools. Atomix v3.1.5 is vulnerable to a resource management error that can be...

Information Disclosure

atomix is vulnerable to information disclosure. An attacker can access sensitive information when a malicious Atomix node queries distributed variable primitives containing the primitive lists that ONOS nodes use to share important states...

Atomix Denial of Service Vulnerability (CNVD-2021-101704)

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false member shutdown event message...

Atomix has an unspecified vulnerability (CNVD-2021-101702)

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows an unauthorized Atomix node to join the target cluster by providing configuration information. No detailed vulnerability details are...

Atomix Information Disclosure Vulnerability

Atomix is a fault-tolerant distributed coordination framework for JAVA 8. Atomix version 3.1.5 is vulnerable to an information disclosure vulnerability. An attacker could exploit this vulnerability to access sensitive information when a malicious Atomix node queries the distributed variable...

Atomix has unspecified vulnerabilities

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows malicious Atomix nodes to remove state from ONOS storage by abusing raw operations. No details of the vulnerability are currently...