5611 matches found
Fedora: Security Advisory for squid (FEDORA-2021-4d2e7691ca)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
golang: net: lookup functions may return invalid host names
A flaw was found in Go. The LookupCNAME, LookupSRV, LookupMX, LookupNS, and LookupAddr functions in the net package and methods on the Resolver type, may return arbitrary values retrieved from DNS, allowing injection of unexpected contents. The highest threat from this vulnerability is to integri...
CVE-2021-36178
A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...
CVE-2021-36178
A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...
PT-2021-21160
Name of the Vulnerable Software and Affected Versions Fortinet FortiSDNConnector versions 1.1.7 and below Description The issue allows an attacker to disclose third-party devices' credential information via a configuration page lookup due to insufficiently protected credentials. Recommendations F...
CVE-2021-36178: Insufficiently Protected Credentials
A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...
Mail.ru: OS command injection on seedr.ru
site: https://seedr.ru The seedid parameter be vulnerable to OS command injection attacks. It is possible to use various shell metacharacters to inject arbitrary OS commands. The command output does not appear to be returned in the application's responses, however it is possible to inject time...
Fortinet FortiSDNConnector 安全漏洞
Fortinet FortiSdnConnector is used to bridge Sdn controllers and Fortinet devices including FortiGate and FortiManager from Fortinet USA. A security vulnerability exists in Fortinet FortiSDNConnector versions 1.1.7 and below, which can be exploited by an attacker to disclose third-party device...
ntfs-3g: Out-of-bounds read in ntfs_ie_lookup()
The ntfs3g package is susceptible to an input validation flaw. When processing a crafted NTFS image there is an improper check which leads to an out of bounds read. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
gdal:ogr_fuzzer: Stack-buffer-overflow in ncindexlookup
Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6381498756890624 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f2033ed7d81 Crash...
MailRipV2 - Improved SMTP Checker / SMTP Cracker With Proxy-Support, Inbox Test And Many More Features
Your SMTP checker / SMTP cracker for mailpass combolists including features like: proxy-support SOCKS4 / SOCKS5 with automatic proxy-scraper and checker, e-mail delivery / inbox check and DNS lookup for unknown SMTP-hosts. Made for easy usage and always working! Overview Legal Notices You are ONL...
PT-2024-11390
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel's netfilter nf tables component. The problem arises because all get operations are lockless, allowing a parallel GET reques...
UBUNTU-CVE-2021-39583
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...
CVE-2021-39583
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...
PT-2021-22655
Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool lookup string2 located in pool.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions throug...
Swftools 代码问题漏洞
SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the poollookupuint function in SWFTools pool.c. An attacker could exploit this vulnerability to cause a denial of service...
PT-2021-22664
Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool lookup uint located in pool.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions through...
PT-2023-3600
Name of the Vulnerable Software and Affected Versions Qt versions 5.x before 5.15.14 Qt versions 6.x before 6.2.9 Qt versions 6.3.x through 6.5.x before 6.5.1 Description The issue is related to a buffer over-read in the QDnsLookup component of the Qt framework, which can be exploited by a remote...
