Memory leak vulnerability in multiple Huawei products (CNVD-2021-25948)

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

Code injection

An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...

CVE-2021-29933

An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...

CVE-2021-29933

An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...

CVE-2021-29933: Double Free

An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a security vulnerability in version 2021-01-26 and earlier, which stems from the fact that elements may be deleted twice if the .next method is wrong. No details of the vulnerability are available at th...

OpenStack Horizon Parameter Redirection

The vulnerability of the “next” parameter in the user interface of OpenStack Horizon is related to the lack of checks for this parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data and compromise its integrity...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2021-24915)

Huawei NGFW Module and so on are products of Huawei China.NGFW Module is a next-generation firewall NGFW module.Huawei NIP6800 is a set of intrusion prevention system.Huawei NIP6300 is an intrusion prevention system mainly applicable to enterprises, schools, operators, and IDCs. A denial of servi...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2021-24914)

Huawei NGFW Module and others are products of Huawei, China.NGFW Module is a next-generation firewall NGFW module.USG6600 is a data-in-the-firewall product.Secospace USG6600 is a next-generation firewall product. A denial of service vulnerability exists in multiple Huawei products due to a module...

Weak Password Vulnerability in Boda Next-Generation Firewall of Shanghai Boda Data Communication Co.

Boda NGFW Next Generation Firewall is a firewall product designed and launched by Shanghai Boda Data Communication Co., Ltd. for medium-sized network security demand scenarios such as enterprises, governments, hotels, hospitals, schools and so on. Shanghai BODA Data Communication Co., Ltd BODA NG...

CloudBees Jenkins Warnings Next Generation Plugin Improper Privileges Vulnerability

Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...

Multiple Huawei products have security vulnerabilities

Huawei NGFW Module and others are products of Huawei, China.NGFW Module is a next-generation firewall NGFW module.USG6600 is a data-in-the-firewall product.Secospace USG6600 is a next-generation firewall product. A denial of service vulnerability exists in multiple Huawei products due to a module...

Design/Logic Flaw

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

CVE-2021-21626

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

Jenkins Warnings: Next Generation Security Vulnerabilities

Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...

CVE-2021-21626: Missing Authorization

Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...

PT-2021-14669 · Jenkins · Jenkins Warnings Next Generation Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Warnings Next Generation Plugin versions 8.4.4 and earlier Description: The issue allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns mat...

File Upload Vulnerability in NGFW of Netcom Next Generation Firewall (CNVD-2021-24752)

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...