Aruba ClearPass Policy Manager Denial of Service Vulnerability (CNVD-2021-50090)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager, which can be exploited by attackers to conduct denial-of-service attacks on the system...

Aruba ClearPass Policy Manager Deserialization Vulnerability

Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager in 6.10.0, 6.9.6 and 6.8.9 before the existence of deserialization vulnerability, there are no details of the vulnerability...

Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-50092)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager has a security vulnerability that could allow a remote attacker to perform a SQL injection attack on a ClearPass instance...

GSD-2021-1001105 net: caif: fix memory leak in ldisc_open

net: caif: fix memory leak in ldiscopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.238 by commit...

Command Execution Vulnerability in TopGate500 at Skyrise Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A command execution vulnerability exists in TopGate500 of Tianrongxin Technology Group, which can be exploited by an...

Aruba ClearPass Policy Manager Authorization Issue Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to access some unexpected features on ClearPass...

Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group (CNVD-2021-51352)

Skyrise Technology Group is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be exploited by an attacker to gain control of a server...

Kaseya VSA Input Validation Error Vulnerability

Kaseya VSA RMM is a remote monitoring and terminal management solution from Kaseya, Switzerland. Kaseya VSA suffers from an input validation error vulnerability that arises from a network system or product that does not properly validate incoming data. A remote attacker could exploit this...

EulerOS Virtualization 3.0.2.2 : PyYAML (EulerOS-SA-2021-2165)

According to the versions of the PyYAML package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS ...

EulerOS Virtualization 3.0.2.2 : bluez (EulerOS-SA-2021-2129)

According to the versions of the bluez package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a use-after-free was identified in 'confopt' function in 'tools/parser/l2cap.c' source file. This issue can be...

EulerOS Virtualization 3.0.2.2 : trousers (EulerOS-SA-2021-2171)

According to the versions of the trousers package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss use...

Backdoor.Win32.Zombam.l Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9729e9fc004ea49d3c2ddee28736dae3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.l Vulnerability: Remote Stack Buffer Overflow Description: Zombam malware...

SQL Injection Vulnerability in Blue Ocean Premier Billing Management System (CNVD-2021-51859)

Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. The Blue Ocean Excellence Billing Management System suffers from a SQ...

Advisory ROSA-SA-2021-1813

Software: clamav 0.102.4 OS: Cobalt 7.9 CVE-ID: CVE-2021-1386 CVE-Crit: HIGH CVE-DESC: A vulnerability in the Dynamic Link Library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Windows Connector endpoints, ClamAV for Windows, and Immunet could allow an authenticated local...

EulerOS Virtualization for ARM 64 3.0.2.0 : perl-DBI (EulerOS-SA-2021-2112)

According to the versions of the perl-DBI package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in the DBI module before 1.643 for Perl. The hvfetch documentation requires checking for NULL...

EulerOS Virtualization for ARM 64 3.0.2.0 : jbigkit (EulerOS-SA-2021-2074)

According to the version of the jbigkit package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting i...

Fancy Bear Is Trying to Brute-Force Hundreds of Networks

While SolarWinds rightly drew attention earlier this year, Moscow's Fancy Bear group has been on a password-guessing spree this whole time...

Netgear Authentication Bypass Allows Router Takeover

Netgear has patched three bugs in one of its router families that, if exploited, can allow threat actors to bypass authentication to breach corporate networks and steal data and credentials. Microsoft security researchers discovered the bugs in Netgear DGN-2200v1 series routers while they were...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-2049)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3...

EulerOS 2.0 SP9 : python-pygments (EulerOS-SA-2021-2054)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a...