CVE-2021-40089: Undefined Security Weakness

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disable...

Citrix Systems Citrix ShareFile 处理逻辑错误漏洞

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems, Inc. A Processing Logic Error vulnerability exists in Citrix Systems Citrix ShareFile, which stems from the product no longer being able to select the Enable Encryption option when running the CTX269106 mitigation too...

Important: kernel-livepatch-4.14.232-177.418

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.232-177.418 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.232-177.418 or yum update --advisory ALAS2LIVEPATCH-2021-059 to update your system. New...

Important: kernel-livepatch-4.14.231-173.361

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.231-173.361 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.231-173.361 or yum update --advisory ALAS2LIVEPATCH-2021-057 to update your system. New...

Important: kernel-livepatch-4.14.232-176.381

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.232-176.381 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.232-176.381 or yum update --advisory ALAS2LIVEPATCH-2021-056 to update your system. New...

Important: kernel-livepatch-4.14.238-182.421

Issue Overview: No CVE associated with this advisory Affected Packages: kernel-livepatch-4.14.238-182.421 Issue Correction: Please ensure you have live patching enabled. Run yum update kernel-livepatch-4.14.238-182.421 or yum update --advisory ALAS2LIVEPATCH-2021-055 to update your system. New...

EulerOS Virtualization for ARM 64 3.0.2.0 : bind (EulerOS-SA-2021-2092)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In BIND 9.0.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.3-S1 - 9.11.21-S1 of the BIND 9 Supported...

CVE-2021-35973

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...

PT-2021-25465

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.46 Description: A NULL pointer dereference issue exists if priv-enable gpios is NULL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-29540

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A NULL pointer dereference issue exists if priv-enable gpios is NULL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-29459

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.46 Description A NULL pointer dereference issue exists if priv-enable gpios is NULL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

SAP Enable Now Information Disclosure Vulnerability (CNVD-2021-42412)

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. An information disclosure vulnerability exists in SAP Enable Now versions 1.0 and 10, which can be exploited by an...

CVE-2021-27637

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...

CVE-2021-27637

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...

Information disclosure

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...

CVE-2021-27637

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...

CVE-2021-27637

SAP Enable Now (SAP Workforce Performance Builder – Manager) versions 1.0 and 10 have an information disclosure vulnerability under certain conditions that could allow access to restricted information. The exact root cause, affected components, vectors, and remediation are not detailed in the pro...

CVE-2021-27637

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...

PT-2021-17571

Name of the Vulnerable Software and Affected Versions SAP Enable Now SAP Workforce Performance Builder - Manager versions 1.0 through 10 Description The issue allows an attacker to access restricted information under certain conditions, leading to information disclosure. Recommendations For SAP...

CVE-2021-27637: Undefined Security Weakness

Under certain conditions SAP Enable Now SAP Workforce Performance Builder - Manager, versions - 1.0, 10 allows an attacker to access information which would otherwise be restricted leading to information disclosure...