18071 matches found
Arcserve Unified Data Protection - Authentication Bypass
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...
Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fixed a potential out-of-bounds write in lan743xptpioeventclockget. Before calling lan743xptpioeventclockget, the ‘channel’ value is checked against the maximum value of PCI11X1XPTPIOMAXCHANNELS8. This seems correct...
Astra Linux – vulnerability in linux-5.10, linux
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fixed read out-of-bounds in ubifswbufwritenolock The function ubifswbufwritenolock may access buf outside its bounds in the following process: ubifswbufwritenolock: alignedlen = ALIGNlen, 8; // Assume len = 4089, alignedle...
Astra Linux – vulnerability in wpa, pupnp-1.8
The Open Connectivity Foundation UPnP specification prior to 2020-04-17 does not prohibit accepting a subscription request containing a delivery URL located on a network segment different from the fully qualified event-subscription URL; this is known as the CallStranger issue...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free remote desktop protocol library and client. All FreeRDP-based clients that use the /video command-line switch may read uninitialized data, interpret it as audio/video, and display the result. Server implementations based on FreeRDP are not affected by this issue. This issue has...
Astra Linux – Vulnerability in Firefox and Thunderbird
If an attacker could control the contents of an iframe that was sandboxed using allow-popups but not allow-scripts, they could create a link that, when clicked, would cause JavaScript execution, violating the sandboxing rules. This vulnerability affects Firefox 98, Firefox ESR 91.7, and Thunderbi...
Astra Linux – Vulnerability in curl
There is an authentication bypass vulnerability in libcurl version 8.0.0, particularly in the FTP connection reuse feature. This vulnerability can cause incorrect credentials to be used during subsequent transfers. Previously created connections are retained in a connection pool for reuse if they...
Astra Linux – Vulnerability in libtomcrypt
In LibTomCrypt version 1.18.2, the derdecodeutf8string function located in derdecodeutf8string.c does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service such as out-of-bounds reads and crashes or to read information from other...
Astra Linux – Vulnerability in OpenSSH
In OpenSSH versions 5.7 through 8.4, there is an observable discrepancy that can lead to an information leak during algorithm negotiations. This vulnerability allows man-in-the-middle attackers to target initial connection attempts, where no host key has been cached by the client. NOTE: Some...
Astra Linux – Vulnerability in Tomcat9
When responding to new H2C connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, and 8.5.0 to 8.5.61 may duplicate request headers and a limited amount of request body from one request to another. This means that user A and user B may both see the results of user A’...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Expat, LibXMLTok
In xmltokimpl.c within Expat also known as libexpat, before version 2.4.5, there was no proper validation of encoding. This meant that there were no checks to determine whether a UTF-8 character was valid in a particular context...
Astra Linux – vulnerability in libpng1.6
LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Versions 1.6.0 through 1.6.51 contain a heap buffer over-read vulnerability in libpng’s pngwriteimage8bit function when processing 8-bit images via the simplified...
Astra Linux – vulnerability in Firefox
Under unusual circumstances, a single thread may survive beyond the end of its manager’s lifetime during shutdown. This could result in a use-after-free condition that may lead to a crash exploitable by attackers. This vulnerability affects Firefox versions prior to 98...
Astra Linux – vulnerability in Chromium
Out-of-bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu On the i.MX8MQ platform, the ADB in the VPUMIX domain lacks separate reset and clock enable bits; it is ungate and resets along with the VPUs. Consequently, w...
Astra Linux – Vulnerability in nss
During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...
Astra Linux – vulnerability in exim4
In Exim versions prior to 4.99.2, when utf8 operators are enabled, there is a read beyond the bounds of memory if large UTF-8 trailing characters are present malformed UTF-8 header data. This information may be disclosed within an error message generated when processing an unrelated e-mail messag...
