PT-2021-27164

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to an IS ERR vs NULL bug. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.88, update to versi...

PT-2021-27204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.10 Description A bug has been identified in the Linux Kernel, specifically an IS ERR vs NULL issue. The actual impact and potential for exploitation have not been confirmed. Recommendations For Linux...

PT-2021-26659

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.14 Description: A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-30522

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.10.76 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-30654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.14 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30481

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.4.156 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-26527

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.10.76 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-26590

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-30585

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue is related to a fix in the tls err abort function calls, where a flipped sign was corrected. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-26486

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.4.156 Description A potential security issue exists due to a flipped sign in tls err abort calls. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-27890

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 4, and the crash state involves...

CLSA-2021-1632262269 Fix of CVE: CVE-2021-34693, CVE-2021-20292, CVE-2021-28972, CVE-2021-20265, CVE-2021-32399, CVE-2014-4508, CVE-2021-3612, CVE-2021-3178, CVE-2021-37159, CVE-2021-38205, CVE-2021-3573, CVE-2021-38160

ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...

UBUNTU-CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

CVE-2020-35724

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter or indirectly via the cpr, tcp, or abs parameter. NOTE: This vulnerability only affects products that are no...

CVE-2020-35724: Improper Neutralization of Input During Web Page Generation

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter or indirectly via the cpr, tcp, or abs parameter. NOTE: This vulnerability only affects products that are no...

PT-2020-22289

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The issue is related to a heap-buffer-overflow write error. Technical details about the crash include the involvement of OPENSSL strlcpy, OPENSSL strlcat, and ERR add error vdata functions...

PT-2019-12870

Name of the Vulnerable Software and Affected Versions ZyWall, USG, and UAG devices affected versions not specified Description A reflective Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the err msg parameter in the free time failed.cgi CGI...

CVE-2019-5588: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site-Scripting XSS vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests...

PT-2019-2514

Name of the Vulnerable Software and Affected Versions FortiOS versions 6.0.0 through 6.0.4 Description The issue is related to a lack of input sanitization in the SSL VPN web portal of the FortiOS operating system. This can be exploited by a remote attacker to perform a reflected Cross-Site...

CVE-2019-9605: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...