Weak Password Vulnerability in Flying FishStar Next-Generation Firewall Security Gateway

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service that serves enterprise, business and home users with intelligent and easy-to-use network communication management devices and innovative technologies. A weak password vulnerability exists in the security gateway of Flyingfish...

PT-2021-4617 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...

File Upload Vulnerability in the Frontend of NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.

Netcom Next Generation Firewall NGFW is a high-performance firewall that can comprehensively address application layer threats. A file upload vulnerability exists in the frontend of NS-NGFW, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Netcom Next Generation Firewall NS-NGFW

Netcom Next Generation Firewall NGFW is a high-performance firewall that can comprehensively address application layer threats. A file upload vulnerability exists in NS-NGFW, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in NGFW of Netcom Next Generation Firewall (CNVD-2021-24366)

Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Malware Gangs Partner Up in Double-Punch Security Threat

Cybergangs are joining forces under the guise of affiliate groups and “as-a-service” models, warns Maya Horowitz, the director of threat intelligence research with Check Point Research. She said the trend is driving a new and thriving cybercriminal underground economy. Several malware gangs have...

IBM Engineering Requirements Management DOORS Next – Cross-site Scripting Vulnerabilities

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines Corporation IBM. The solution helps you capture, track, analyze and manage systems and advanced IT application development. IBM Engineering Requirements Management DOORS Next suffers fro...

IBM Engineering Requirements Management DOORS Next – Cross-site Scripting Vulnerabilities

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines Corporation IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A cross-site scripting vulnerability exists in IBM Engineerin...

Token Verification Bug

Overview Impact next-auth implementations using the Prisma database adapter with the Email provider are impacted. Implementations using the Prisma database adapter that are not using the Email provider are not impacted. Implementations using the default database adapter TypeORM with the Email...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +4 more potentially affected by CVE-2021-21310 via next-auth (>=0.0.0-manual.83c4ebd1, <=3.1.0)

next-auth NPM version =0.0.0-manual.83c4ebd1, =0.5.1, =0.57.0, =0.35.0, =1.1.0, =0.0.1, =0.0.5 Source cves: CVE-2021-21310 Source advisory: MEND:CVE-2021-21310...

CVE-2021-21310

NextAuth.js (next-auth) token verification vulnerability affects the Prisma database adapter when used with the Email provider (before 3.3.0). The defect: verification tokens were checked but not the associated email identifier, enabling sign-in as another user with a valid token. The issue is sp...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2021-21310 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2021-21310 Source advisory: OSV:GHSA-PG53-56CG-4M8Q...

@newskit-render/auth (>=0.5.1, <=0.31.0), @newskit-render/core (>=0.57.0, <=1.40.0) +1 more potentially affected by CVE-2021-21310 via next-auth (3.1.0)

next-auth NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on next-auth and may be impacted: - @newskit-render/auth =0.5.1, =0.57.0, =0.35.0, =0.49.2 Source cves: CVE-2021-21310 Source advisory: GHSA-PG53-56CG-4M8Q...

CVE-2021-0340

In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions...

Multiple Huawei products have buffer error vulnerabilities

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

PT-2021-17423

Name of the Vulnerable Software and Affected Versions yottadb crate versions prior to 1.2.0 Description An issue was discovered in the yottadb crate where ydb subscript next st and ydb subscript prev st have a use-after-free for some memory-allocation patterns. This occurs when the variable and...

RUSTSEC-2021-0004 Missing Send bound for Lazy

All current versions of this crate allow causing data races in safe code. The flaw will be fixed in the next release...

Missing Send bound for Lazy

All current versions of this crate allow causing data races in safe code. The flaw will be fixed in the next release...

PT-2021-27478

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue. The crash state includes functions such as netdev get, config parse netdev, and next assignment...

PT-2021-27386

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to an index-out-of-bounds crash. The crash occurs in the following functions: fuzz send next response, fuzz handle transfer, and...