CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

CVE-2021-25932

In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...

The vulnerability of the Squid proxy server arises from insufficient validation of the data entered by users when sending HTTP request responses. This allows attackers to trigger a service failure.

The vulnerability of the Squid proxy server exists due to insufficient validation of the data entered by users when responding to HTTP requests. Exploiting this vulnerability allows a malicious actor to cause service failures...

Opennms Group OpenNMS 跨站脚本漏洞

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based OpenNMS Group Opennms Group. A cross-site scripting vulnerability exists in OpenNMS Horizon that stems from incorrect validation checks performed on the input of the...

CVE-2021-23853

In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1775 advisory. - resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Note that Nessus has not tested for this issue but has...

RHEL 8 : pki-core:10.6 and pki-deps:10.6 (RHSA-2021:1775)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1775 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: resteasy: Improper...

Netgate pfSense Cross-Site Scripting (CVE-2021-27933)

A stored cross-site scripting vulnerability exists in Netgate pfSense. The vulnerability is due to improper validation of the descr parameter in the serviceswoledit.php...

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A code execution vulnerability exists in Foxit Reader. The vulnerability stems from the program's lack of proper validation of user-supplied data. An attacker can exploit this vulnerability to execute code in the context of th...

Input validation

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet...

Null pointer dereference

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

CVE-2021-25846

CVE-2021-25846 affects Moxa Camera VPort 06EC-2V Series (version 1.1) via improper validation of the ChassisID TLV in the LLDP handling path (userdisk/vport_lldpd). A crafted LLDP packet can pass a negative value to memcpy, triggering a denial of service. The vulnerability is documented across mu...

CVE-2021-25845

Improper validation of the ChassisID TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet...

CVE-2021-25847

Improper validation of the length field of LLDP-MED TLV in userdisk/vportlldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet...

CVE-2021-25847

The CVE-2021-25847 issue affects Moxa Camera VPort 06EC-2V Series (version 1.1), where improper validation of the LLDP-MED TLV length in file userdisk/vport_lldpd enables information disclosure via a crafted LLDP packet that can trigger a controllable loop counter. The vulnerability is network‑fa...

CVE-2021-1915

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Foxit Reader 缓冲区错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader 缓冲区错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader 缓冲区错误漏洞

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader 缓冲区错误漏洞

Foxit Reader is a PDF document reader from the Chinese company Foxit. Foxit Reader 10.1.1.37576 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, resulting in reading more than the end of an allocated object. An attacker can exploit this...