1316 matches found
CVE-2021-43958
Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were beyond their max failed login limits and therefore required solving a CAPTCHA in addition to providing user credentials...
Authentication flaw
Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest resources did not check if users were beyond their max failed login limits and therefore required solving a CAPTCHA in addition to providing user credentials...
fence-agents bug fix and enhancement update
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Bug Fixes and Enhancements: fenceaws fails to find credentials when only IMDSv2 is...
Bareos 安全漏洞
Bareos is a suite of open source data backup storage and recovery software from Bareos, Germany.Bareos Director is the daemon for Bareos. A security vulnerability exists in Bareos that stems from a small amount of memory being leaked by a failed PAM authentication when the affected product is bui...
Atlassian Fisheye和Crucible 安全漏洞
Atlassian Fisheye is a suite of source code deep viewing software.Atlassian Crucible is a suite of code review tools. Atlassian Fisheye and Crucible are vulnerable to a brute force vulnerability due to a failure to check whether a user has exceeded their maximum failed login limit. An attacker...
The vulnerability in the web interface for managing server applications used in food industrial enterprises, AK-EM 800, allows a hacker to lock out any user account at will.
The vulnerability in the web-based interface for managing server applications used in food industry management systems, AK-EM 800, stems from the locking of user accounts after five consecutive unsuccessful attempts to log in to the system. Exploiting this vulnerability could allow a malicious...
CVE-2022-23849
The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...
CVE-2022-23849
The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication bypass. An attacker must rapidly make failed biometric authentication attempts...
CVE-2021-45861
There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...
GSD-2022-1000424 misc: fastrpc: avoid double fput() on failed usercopy
misc: fastrpc: avoid double fput on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...
GSD-2022-1000239 drm/vmwgfx: Fix stale file descriptors on failed usercopy
drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.18 by commit...
GSD-2022-1000146 drm/vmwgfx: Fix stale file descriptors on failed usercopy
drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.175 by commit...
GSD-2022-1000119 drm/vmwgfx: Fix stale file descriptors on failed usercopy
drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.227 by commit...
GSD-2022-1000095 drm/vmwgfx: Fix stale file descriptors on failed usercopy
drm/vmwgfx: Fix stale file descriptors on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.264 by commit...
Google TensorFlow 代码问题漏洞
Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google TensorFlow has a code issue vulnerability that could be exploited by an attacker to cause a crash due to a failed assertion...
CVE-2021-46511
There is an Assertion m-len = sizeofv' failed at src/mjscore.c in Cesanta MJS v2.20.0...
CVE-2021-46506
There is an Assertion 'v-d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0...
CVE-2021-46517
There is an Assertion mjsstacksize&mjs-scopes 0' failed at src/mjsexec.c in Cesanta MJS v2.20.0...