ATT&CK Table for Sophisticated Spearphishing Campaign CSA

Summary See Technical Details section Technical Details Table 1 provides a summary of the MITRE ATT&CK techniques observed. Table 1: MITRE ATT&CK techniques observed Technique Title | Technique ID ---|--- Process Injection: Dynamic-link Library Injection | T1055.001 Ingress Tool Transfer | T1105...

PT-2021-19811 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.5.0 through 1.10.1 Description: The issue concerns modules dynamically imported through import or new Worker that might bypass network and file system permission checks when statically importing other modules. An attacker in...

Vulnerability fixed in DHCP

A vulnerability has been fixed in DHCP. The vulnerability allows a remote malicious party to cause a denial-of-service. cause. ISC has released updates to fix the vulnerability. More information can be found on the page below: https://kb.isc.org/docs/cve-2021-25217 -= Ubuntu =- Canonical has made...

Deno 授权问题漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. An authorization issue vulnerability exists in Deno versions 1.5.0 through 1.10.1, which arises from the fact that modules dynamically imported via import or new...

USN-4969-2 isc-dhcp vulnerability

USN-4969-1 fixed a vulnerability in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly handled lease file parsing. A remote attacker could possibly use this issue...

USN-4969-1 isc-dhcp vulnerability

Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly handled lease file parsing. A remote attacker could possibly use this issue to cause DHCP to crash, resulting in a denial of service...

OpenSSH 4.0 < 4.2 Security Vulnerability

If no listen address is specified for dynamic port forwardings forwarding with the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Insecure Session Management

vault uses insecure session management. Vault and Vault Enterprise renewed nearly-expiring token leases and dynamic secret leases with a zero-second TTL, causing them to be treated as non-expiring, and never revoked...

UBUNTU-CVE-2021-25217

In ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16, ISC DHCP 4.4.0 - 4.4.2 Other branches of ISC DHCP i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series are beyond their End-of-Life EOL and no longer supported by ISC. From inspection it is clear that the defect is also present in...

ISC DHCP 缓冲区错误漏洞

ISC DHCP is a suite of open source Dynamic Host Configuration Protocol server software from ISC Corporation. ISC DHCP suffers from a buffer error vulnerability that stems from a program that may cause dhclient to crash when reading an incorrect lease, which could lead to network connectivity issu...

systemd security, bug fix, and enhancement update

239-45.0.1 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate...

KB5003240 Setup Dynamic Update for Windows 10, version 2004, 20H2, and 21H1: May 25, 2021

None None...

IBM DB2 代码问题漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The system is executed on UNIX, Linux, IBMi, z/OS, and Windows server versions. A code issue vulnerability exists in IBM DB2 that allows local users to execute arbitrary code and conduct DLL hijacking attacks...

GHSA-XG2H-WX96-XGXR vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

GHSA-XG2H-WX96-XGXR vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

The installers of ScanSnap Manager may insecurely load Dynamic Link Libraries

Overview The installers of ScanSnap Manager provided by FUJITSU LIMITED contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated wi...

Installer of Overwolf may insecurely load Dynamic Link Libraries

Overview Overwolf is a software framework for creating applications for games. The Overwolf Installer contains an issue with the DLL search path CWE-427, which may lead to insecurely loading Dynamic Link Libraries stored in the same directory where the installer resides. Shogo kumamaru of LAC Co....

Overwolf 代码问题漏洞

Overwolf is a framework from the Israeli company Overwolf that supports building games using HTML and JavaScript. Overwolf Installer 2.168.0 suffers from a code issue vulnerability that stems from the application loading DLL libraries in an insecure manner. A remote attacker could exploit the...

JVN#65733194: The installers of ScanSnap Manager may insecurely load Dynamic Link Libraries

The installers of ScanSnap Manager provided by FUJITSU LIMITED contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

Fujitsu ScanSnap Manager 代码问题漏洞

Fujitsu ScanSnap Manager is a scanner driver required to manage ScanSnap scanned documents from Fujitsu Japan. ScanSnap Manager: A code issue vulnerability exists in versions prior to 7.0L20, which arises from the application loading DLL libraries in an insecure manner. A local attacker could...