2171 matches found
CVE-2021-31839 Incorrect permissions on McAfee Agent for Windows event folder
Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server...
FreePBX 13.x <= 13.0.93.2, 14.x <= 14.0.22.2, 15.x <= 15.0.19.2 RCE Vulnerability
FreePBX is prone to a remote code execution RCE vulnerability. NOTE: This VT is reporting a false positive and therefore has been deprecated. The vulnerability exists in the Restapps / Phone apps module and not in the core framework itself. SPDX-FileCopyrightText: 2021 Greenbone AG Some text...
GSD-2021-1000138 ext4: fix check to prevent false positive report of incorrect used inodes
ext4: fix check to prevent false positive report of incorrect used inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...
UVI-2021-1000138 ext4: fix check to prevent false positive report of incorrect used inodes
ext4: fix check to prevent false positive report of incorrect used inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.36 by commit...
GSD-2021-1000103 ext4: fix check to prevent false positive report of incorrect used inodes
ext4: fix check to prevent false positive report of incorrect used inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...
GSD-2021-1000171 ext4: fix check to prevent false positive report of incorrect used inodes
ext4: fix check to prevent false positive report of incorrect used inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...
UVI-2021-1000171 ext4: fix check to prevent false positive report of incorrect used inodes
ext4: fix check to prevent false positive report of incorrect used inodes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.118 by commit...
PT-2021-28638
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns a false positive report of incorrect used inodes in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-28605
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue concerns a false positive report of incorrect used inodes in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-24576
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to a false positive report of incorrect used inodes in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2021-24535
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue concerns a false positive report of incorrect used inodes in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2021-24644
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.118 Description The issue concerns a false positive report of incorrect used inodes in the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...
PT-2021-28529
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue is related to a false positive report of incorrect used inodes in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
jwt-go: access restriction bypass vulnerability
A vulnerability was found in jwt-go where it is vulnerable to Access Restriction Bypass if m"aud" happens to be string, as allowed by the spec, the type assertion fails and the value of aud is "". This can cause audience verification to succeed even if the audiences being passed are incorrect if...
4 things you should know about testing AV software with VirusTotal’s free online multiscanner
As COVID-19 soldiers on, small and medium-size businesses now feel as ripe for malware attacks as deep-pocketed multinationals. SMBs see that, along with remote work, our pandemic has also brought troubling new holes to their security. This means cybercriminals—equal opportunity charlatans that...
GHSA-Q28M-8XJW-8VR5 Puma's Keepalive Connections Causing Denial Of Service
This vulnerability is related to CVE-2019-16770. Impact The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same process...
Exploit for Use After Free in Microsoft
CVE-2021-31166 Detection Rules Different rules to detect if CV...
CVE-2021-29509
Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections saturating all threads in the same...
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Both the iThemes Security free and pro versions were affected. - Patched in Version iThemes Security: 7.9.1 - Patched in Version iThemes Security Pro: 6.8.4 The bug allowed attackers to bypass the "Hide Backend" feature, that, when enabled, hides the WordPress wp-login.php and wp-admin pages...