Cisco Adaptive Security Appliance and Firepower Threat Defense Command Injection Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...

Command Execution Vulnerability in V8+ Terminal Security System (CNVD-2021-35828)

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Logic Flaw Vulnerability in ENLINK CASB Backend Management System

Ltd. specializes in network security product development and sales, is the industry's leading "zero trust" solution provider. A logic flaw exists in the backend management system of ENLINK CASB, which can be exploited by an attacker to cause an arbitrary user password to log into the management...

nss: TLS 1.3 CCS flood remote DoS Attack

A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2021:1314-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.11+9 April 2021 CPU - CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms bsc1185055 - CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2021:1310-1)

This update for librsvg fixes the following issues : librsvg was updated to 2.42.9 : - Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43...

Debian DLA-2637-1 : drupal7 security update

The Drupal project identified a vulnerability in the sanitization performed in the filterxssarttributes function, potentially allowing a cross-site scripting, and granted it the Drupal Security Advisory ID SA-CORE-2021-002 : https://www.drupal.org/sa-core-2021-002 No CVE number has been announced...

Design/Logic Flaw

Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page...

CVE-2021-21210

Affected software: Google Chrome (before version 90.0.4430.72). The CVE describes an Inappropriate implementation in Network that could allow a remote attacker to potentially access local UDP ports via a crafted HTML page. Impact statements in the connected documents indicate a remote attacker co...

Trend Micro HouseCall for Home Networks elevation of privilege vulnerability (CNVD-2021-37058)

Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...

Weak password vulnerability in TP-LINK TL-WR1042ND router

P&T Technologies Ltd. is a leading global provider of network communication equipment. A weak password vulnerability exists in the TL-WR1042ND router, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

About the security content of Apple Music 3.5.0 for Android

About the security content of Apple Music 3.5.0 for Android This document describes the security content of Apple Music 3.5.0 for Android. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred an...

systemd 安全漏洞

systemd is a Linux-based system and service manager from the individual developer Lennart Poettering in Germany. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A security vulnerability exists in systemd d...

Trend Micro HouseCall for Home Networks elevation of privilege vulnerability (CNVD-2021-37057)

Trend Micro HouseCall for Home Networks is a suite of home network security scanning software from Trend Micro. The software supports scanning a wide range of home network devices and identifying network risks. An elevation of privilege vulnerability exists in Trend Micro HouseCall for Home...

KB5001028: Windows 10 version 1909 OOB Security Update (Feb 2021)

The remote Windows host is missing a security update. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

Arbitrary File Read Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

Cisco SD-WAN vManage XXE (cisco-sa-vman-xml-ext-entity-q6Z7uVUg)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Logic Flaw Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...

CVE-2021-2253

CVE-2021-2253 affects Oracle Advanced Supply Chain Planning (Oracle Supply Chain) Core in versions 12.1 and 12.2. The vulnerability arises in the core component, enabling an unauthenticated attacker to compromise via HTTP over network access, potentially leading to unauthorized creation, deletion...

CVE-2021-2135

CVE-2021-2135 affects Oracle WebLogic Server (Coherence Container) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The Nuclei template confirms remote code execution via unauthenticated access over T3/IIOP, allowing an attacker with network access to take over the server. Documented impact is fu...