The vulnerability of Allen-Bradley MicroLogix programmable logic controllers, related to errors in number processing, allows a intruder to trigger a service failure.

The vulnerability of Allen-Bradley MicroLogix programmable logic controllers is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in service operations using a specially crafted package...

DEBIAN-CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

Design/Logic Flaw

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations as a result of changes to the handling of grant mapping errors. A host OS denial of service may occur during...

MGASA-2021-0102 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An...

`quinn` invalidly assumes the memory layout of std::net::SocketAddr

The quinn crate has assumed std::net::SocketAddrV4 and std::net::SocketAddrV6 have the same memory layout as the system C representation sockaddr. It has simply casted the pointers to convert the socket addresses to the system representation. The standard library does not say anything about the...

Linux: netback fails to honor grant mapping errors

ISSUE DESCRIPTION XSA-362 tried to address issues here, but in the case of the netback driver the changes were insufficient: It left the relevant function invocation with, effectively, no error handling at all. As a result, memory allocation failures there could still lead to frontend-induced...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Dell EMC PowerProtect Cyber Recovery Information Disclosure Vulnerability

Dell EMC PowerProtect is an application from Dell Japan. It is used by companies to protect, manage and recover their most critical application data. An information disclosure vulnerability exists in Dell EMC PowerProtect Cyber Recovery version 19.7.0.1. The vulnerability arises from errors such ...

openSUSE Security Update : qemu (openSUSE-2021-363)

This update for qemu fixes the following issues : - Fixed potential privilege escalation in virtfs CVE-2021-20181 bsc1182137 - Fixed out-of-bound access in iscsi CVE-2020-11947 bsc1180523 - Fixed out-of-bound access in vmxnet3 emulation CVE-2021-20203 bsc1181639 - Fixed out-of-bound access in ARM...

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the SetImageExtent() function in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the SetImageExtent function /MagickCore/image.c in the console-based graphic editor ImageMagick is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to trigger a service failure by using a specially created file...

The vulnerability of the BGP protocol implementation in the NX-OS network operating system in ACI Mode allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in the NX-OS network operating system in ACI Mode is related to errors in processing parameters during the reception of BGP updates. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Fedora 33 : kernel (2021-7143aca8cb)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-7143aca8cb advisory. - An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant...

CVE-2020-24686

CVE-2020-24686 affects ABB AC500 V2 with onboard Ethernet. The issue is a denial of service in the PLC’s web visualization component: when exploited, the component stops responding and genuine users lose remote visibility of PLC state. If a user logs in while the vulnerability is exploited, the P...

SUSE-SU-2021:0631-1 Security update for salt

This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd bsc1182740 - Allow extrafilerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-31...

DEBIAN-CVE-2021-23973

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

CVE-2021-23973

When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox 86, Thunderbird 78.8, and Firefox ESR 78.8...

Adobe Bridge Multiple Code Execution Vulnerabilities (APSB21-07) - Windows

Adobe Bridge is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; if description...