17645 matches found
CVE-2021-0236
The CVE-2021-0236 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically MP-BGP VPNv6 FlowSpec processing. The root cause is an improper check for unusual or exceptional conditions in the RPD when handling a matching BGP FlowSpec packet, leading to a crash and restart and a su...
CVE-2021-31545
CVE-2021-31545 concerns the AbuseFilter extension for MediaWiki up to version 1.35.2. The root cause is the page_recent_contributors leakage of the existence of certain deleted MediaWiki usernames (related to rev_deleted). The impact described in the sources is a partial confidentiality exposure....
CVE-2021-31547
The CVE-2021-31547 issue affects MediaWiki's AbuseFilter extension up to version 1.35.2. A vulnerability in the AbuseFilterCheckMatch API allows suppressed edits and usernames to be exposed to unprivileged users via crafted AbuseFilter rules. No exploitation details or patches are provided in the...
Arbitrary File Deletion Vulnerability in Vermont Cloud at Shanghai Vermont Software Co.
Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. VUMA Cloud suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary information...
Swiss Army knife For Information Security: What is Comprehensive Protection?
Written by Sergey Ozhegov, CEO of SearchInform In the early days of information security, we used to rely on antivirus and firewall in our arsenal. Once I even “caught” a leak with the help of the firewall logs: I noticed an atypically large data upload and found out that the user was uploading...
Arbitrary file reading vulnerability exists in Saida Technology's CloudVision video conferencing terminal
Anhui Saida Technology Co., Ltd. focuses on intelligent cloud video industry, based on the network of communication carriers, using a new generation of information technology to create a "cloud video application engine", focusing on big data application platforms, intelligent terminal product...
Weak Password Vulnerability in UTP-R3050-5GP
Founded in 2005, UTEPO is an industrial communication and intelligent Internet of Things solution provider with "Netpower" technology as the core. Based on technological innovation, UTEPO provides intelligent Internet of Things solutions in the fields of smart parks, smart security, smart cities,...
Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System
Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...
CVE-2021-30015
Summary: CVE-2021-30015 affects GPAC 1.0.1 and is a null pointer dereference in filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal, where the pid comes from av1dmx_parse_flush_sample and ctx.opid may be NULL, causing a crash. Affected software: GPAC 1.0.1 (as referenced in NVD and CNVD OSV...
CVE-2021-31261
CVE-2021-31261 affects GPAC 1.0.1; the gf_hinter_track_new path allows memory read via a crafted MP4Box input. The impact is information disclosure (read memory) with local access and, per sources, user interaction may be required. Mitigation: upgrade GPAC to a newer release (Gentoo GLSA 202408-2...
Weak password vulnerability in H3C s1526 switch
H3C S1526 switch is a Layer 2 wire-speed Ethernet switching product independently developed by H3C Communication Technology Co., Ltd. and is an intelligent switch designed for network environments that require high performance and easy installation. A weak password vulnerability exists in the H3C...
SUSE: Security Advisory (SUSE-SU-2019:3266-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows and Windows Server Spoofing Vulnerabilities
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A spoofing vulnerability exists in the "Windows Installer" in Microsoft Windows and Window...
Unauthorized Access Vulnerability in Panasonic-SF335 Camera
Matsushita Electric China Co., Ltd. is an electronics manufacturer that engages in business activities such as the production and sale of various electrical products. An unauthorized access vulnerability exists in the Panasonic-SF335 camera. An attacker can exploit the vulnerability to obtain...
CVE-2021-30479
CVE-2021-30479 affects Zulip Server prior to 3.4, where a bug in the all_public_streams API allowed guest users to receive message traffic from public streams that should be restricted to organization members. This could enable unintended exposure of public-stream content to non-members. Multiple...
GO-2020-0033 Path Traversal in aahframe.work
Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...
