41646 matches found
Vulnerabilities fixed in Microsoft Windows
Vulnerabilities have been fixed in Windows. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Impersonating another user Access to sensitive...
CVE-2021-3128
In ASUS RT-AX3000, ZenWiFi AX XT8, RT-AX88U, and other ASUS routers with firmware 3.0.0.4.386.42095 or 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix...
CVE-2021-3125
In TP-Link TL-XDR3230 1.0.12, TL-XDR1850 1.0.9, TL-XDR1860 1.0.14, TL-XDR3250 1.0.2, TL-XDR6060 Turbo 1.1.8, TL-XDR5430 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This...
Information leakage vulnerability in the website building system of Gongyi Tongchuang Network Technology Service Co.
Gongyi Tongchuang Network Technology Service Co., Ltd. is a company specializing in providing comprehensive, thoughtful and professional Internet solutions, providing website construction, small program production, network promotion, jitterbug filming and production, foreign trade promotion,...
VulnCheck KEV: CVE-2019-0606
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...
Michael gargoyle 安全漏洞
Gargoyle OS is a Web management interface for small router devices. A security vulnerability exists in Gargoyle OS version 1.12.0 that stems from a routing loop that generates excessive network traffic between an affected device and the routers of its upstream ISP when IPv6 is used. No details of...
TP-Link TL-XDR 安全漏洞
The TP-Link TL-XDR is a series of routers from China's P&L TP-Link. A security vulnerability exists in multiple TP-Link routers that stems from a routing loop that occurs when using IPv6, resulting in excessive network traffic between the affected device and the upstream ISP's router. No detailed...
Russia May Have Found a New Way to Censor the Internet
In an attempt to silence Twitter, the Kremlin appears to have developed novel techniques to restrict online content...
Fedora: Security Advisory for seamonkey (FEDORA-2021-2761b54dff)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco Umbrella Injection Vulnerability (CNVD-2021-45274)
Cisco Umbrella is a cloud security platform that provides a first line of defense against Internet threats. A link injection vulnerability exists in the Scheduled Reports feature of Cisco Umbrella. The vulnerability stems from improper neutralization of user-supplied input. An attacker could...
Fedora: Security Advisory for seamonkey (FEDORA-2021-2761b54dff)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the XPC service in Kaspersky Internet Security’s antivirus protection software for MacOS systems allows a hacker to disable the antivirus protection.
The vulnerability of Kaspersky Internet Security’s XPC service for the MacOS operating system is related to errors in the authentication process. Exploiting this vulnerability could allow a hacker to disable the antivirus protection...
The vulnerability in the implementation of UI processes of anti-virus protection solutions from Kaspersky – such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud – allows attackers to trigger a service failure.
The vulnerability of the UI implementation for anti-virus protection solutions from Kaspersky – including Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud – is related to deficiencies in the authentication...
Cisco Umbrella CSV Formula Injection Vulnerability
Cisco Umbrella is a cloud security platform that provides a first line of defense against Internet threats. A CSV formula injection vulnerability exists in Cisco Umbrella's "Administrator Audit Log Export" feature. The vulnerability stems from improper neutralization of formula elements in CSV...
[SECURITY] Fedora 33 Update: seamonkey-2.53.7-2.fc33
SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...
Cross-site-scripting (XSS)
sidekiq is vulnerable to cross-site-scripting. An attacker is able to inject and execute malicious code via the queue name of the live-poll feature when Internet Explorer is used...
Fedora: Security Advisory for seamonkey (FEDORA-2021-df093b89ba)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RIOT Buffer Overflow Vulnerability (CNVD-2021-29117)
RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in the gnrcrplvalidationoptions function in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c in RIOT release 2021.01. No detailed...
RIOT Buffer Overflow Vulnerability (CNVD-2021-29118)
RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in the parseoptions function in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c in RIOT version 2021.01. No detailed...