CVE-2021-45469: Out-of-bounds Read

In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...

CVE-2021-21891

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch deletefile. An attacker can make an...

CVE-2021-21896

A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to arbitrary file deletion. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2021-8082

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.3-1 Description The vulnerability is related to a refcount underflow in the ffs data clear function of the usb f fs module. When userland closes ep0 and then unmounts f fs, ffs data clear is indirectly calle...

PT-2021-8213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the fs/9p component of the Linux kernel, where incorrect permissions in the p9mode2perm function can be exploited, allowing an attacker to read and manipulate dat...

SUSE-SU-2021:3964-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: deps: update llhttp to 2.1.4 - HTTP Request Smuggling due to spaced in headers bsc1191601, CVE-2021-22959 - HTTP Request Smuggling when parsing the body bsc1191602, CVE-2021-22960 Changes in 14.18.0: buffer: +...

Security update for nodejs14 (important)

openSUSE Security Update: Security update for nodejs14 Announcement ID: openSUSE-SU-2021:3964-1 Rating: important References: 1190053 1190054 1190055 1190056 1190057 1191601 1191602 Cross-References: CVE-2021-22959 CVE-2021-22960 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 CVE-2021-39134...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability in the vold incremental-fs APIs of Google Android could cause systemserver to trigger a mount on a directory that should not be under the control of systemserver...

WS-2021-0571

Linux/Kernel is vulnerable to memory leak in addinoderef in fs/btrfs/tree-log.c...

WS-2021-0540

Linux/Kernel is vulnerable to link traversal locking in probe and remove in fs/iouring.c...

WS-2021-0516

In Linux/Kernel in versions v5.15-rc1 to v5.15.5 and v5.16-rc1 to v5.16-rc2 is vulnerable to memleak in getfilestreaminfo in fs/ksmbd/smb2pdu.c...

virt:ol and virt-devel:ol security, bug fix, and enhancement update

libguestfs-winsupport 8.2 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release libguestfs 1.40.2-28.0.1 - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 Orabug: 29319324 - Set DISTROORACLELINUX correspeonding to o...

fs-mall.com Cross Site Scripting vulnerability OBB-2227166

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fs-weber.de Improper Access Control vulnerability OBB-2217563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-6890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue was found in the Linux kernel's block invalidatepage function in fs/buffer.c in the filesystem. The problem is related to a missing sanity check, which may allow a local attacker...

CVE-2021-40456

Windows AD FS Security Feature Bypass Vulnerability...

Security feature bypass

Windows AD FS Security Feature Bypass Vulnerability...

CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability

...

CVE-2021-40456 Windows AD FS Security Feature Bypass Vulnerability

...

CVE-2021-40456

CVE-2021-40456 is a Windows AD FS Server vulnerability described as a security feature bypass . The affected component is Active Directory Federation Services on Windows Server; the core issue is bypassing security restrictions within AD FS. Microsoft and security advisories indicate updates/fixe...