4308 matches found
CVE-2021-29478
Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly...
SUSE-SU-2021:1466-1 Security update for permissions
This update for permissions fixes the following issues: - etc/permissions: remove unnecessary entries bsc1182899...
CVE-2021-29478: Integer Overflow or Wraparound
Redis is an open source BSD licensed, in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly...
PT-2021-2994
Name of the Vulnerable Software and Affected Versions Redis versions 6.2.0 through 6.2.2 Description The issue is related to an integer overflow bug that could be exploited to corrupt the heap and potentially result in remote code execution. This can be achieved by modifying the...
FreeBSD : samba -- negative idmap cache entries vulnerability (6f33d38b-aa18-11eb-b3f1-005056a311d1)
The Samba Team reports : - CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...
USN-4930-1 samba vulnerability
Peter Eriksson discovered that Samba incorrectly handled certain negative idmap cache entries. This issue could result in certain users gaining unauthorized access to files, contrary to expected behaviour...
PT-2021-12938
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.3R3-S12 Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S13 Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S13 Juniper Networks Junos OS versions 18.2 prior to 18.2R3-S8 Juniper...
CVE-2021-0224: Allocation of Resources Without Limits or Throttling
A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...
CVE-2021-28167
In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a us...
SUSE-SU-2021:1268-1 Security update for xen
This update for xen fixes the following issues: - CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 - Fixed an issue where xenstored was crashing with segfault bsc1182155...
SUSE-SU-2021:1251-1 Security update for xen
This update for xen fixes the following issues: - CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 XSA-366, bsc1182431 - CVE-2021-20257: Fixed an infinite loop in the e1000 NIC emulator bsc1182846...
Fedora 32 : python-pikepdf (2021-d97bc581be)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d97bc581be advisory. - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. CVE-2021-29421 Note that...
Fedora 33 : python-pikepdf (2021-4bf9909a76)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4bf9909a76 advisory. - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries. CVE-2021-29421 Note that...
SUSE: Security Advisory (SUSE-SU-2020:3742-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-0224
A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...
Out-of-Bounds Read
apk-tools is vulnerable to out-of-bound read. The vulnerability exists due to insufficient sanity checks on tar entries...
Larsens Calender <= 1.2 - Stored Cross-Site Scripting (XSS)
The plugin does not sanitise or encode the Title of the calendar entries when outputting them in the admin dashboard, leading to Stored XSS issue. Due to the lack of CSRF check, this can be exploited by a CSRF attack, making logged in administrators create malicious entries PoC The PoC will be...
CVE-2020-36308
Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...
