9235 matches found
PT-2021-13336
Name of the Vulnerable Software and Affected Versions Android versions 8.1 through 12 Description The issue is related to a lack of rate limiting in the pairing flow of Android TV, which could lead to silent pairing and potentially allow remote code execution without needing additional execution...
CVE-2021-29738
IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...
CVE-2021-29737
IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...
IBM InfoSphere DataStage Flow Designer 代码问题漏洞
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...
IBM InfoSphere DataStage Flow Designer 信任管理问题漏洞
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...
CVE-2021-38450
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38450 Trane Tracer Code Injection
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38450
CVE-2021-38450 (Trane Tracer) is caused by improper sanitization of input containing code syntax, enabling code injection that could alter controller flow. Affected products and versions: Tracer SC (all versions before v4.4 SP7), Tracer SC+ (before v5.5 SP3), Tracer Concierge (before v5.5 SP3). I...
PT-2021-22128
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue arises from the affected controllers not properly sanitizing the input containing code syntax. This allows an attacker to craft code that can alter the intended controller...
CVE-2021-38450: Improper Control of Generation of Code
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2022-06697)
Junos OS is a FreeBSD-based operating system used in Juniper Networks hardware routers. It is the operating system used in Juniper Networks routing, switching, and security appliances. A denial of service vulnerability exists in the flow daemon flowd on the Juniper Networks Junos OS SRX300 Series...
OPENSUSE-SU-2021:1389-1 Security update for mbedtls
This update for mbedtls fixes the following issues: CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM boo1189589 Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code...
CVE-2021-31364
An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon flowd of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traff...
Always-Incorrect Control Flow Implementation
Overview evm is a SputnikVM: Rust Ethereum Virtual Machine Implementation. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation as the opcode's condition is checked after the destination validity check, while according to Geth and OpenEthereum, the...
CVE-2021-41153: Always-Incorrect Control Flow Implementation
The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In evm crate 0.31.0, JUMPI opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should happen before the destination validity check. This is a...
OPENSUSE-SU-2021:1355-1 Security update for mbedtls
This update for mbedtls fixes the following issues: CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM boo1189589 Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code. This update was imported from the...
Juniper Networks Junos OS 代码问题漏洞
Junos OS is a FreeBSD-based operating system used in Juniper Networks hardware routers. It is the operating system used in Juniper Networks routing, switching, and security appliances. A denial of service vulnerability exists in the flow daemon flowd on the Juniper Networks Junos OS SRX300 Series...
Juniper Junos OS Vulnerability (JSA11226)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11226 advisory. - A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a...
Microsoft Excel 代码注入漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Excel. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during t...