3221 matches found
What COVID-19 Taught Us: Prepping Cybersecurity for the Next Crisis
Few could have anticipated the impact COVID-19 has had on business. It spread from an isolated outbreak to a global pandemic seemingly overnight, and IT leaders across the planet have had mixed success adjusting to the changes and uncertainty it has brought. While COVID-19 caught many businesses...
Command Execution Vulnerability in Next Generation Firewall NS-NGFW
Next Generation Firewall NS-NGFW is a high-performance application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A command execution vulnerability exists in the Next Generation Firewall NS-NGFW, which can be exploited by an attacker to gain serve...
CVE-2021-22312
There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product...
Memory leak vulnerability in multiple Huawei products (CNVD-2021-25948)
Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...
Code injection
An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...
CVE-2021-29933
An issue was discovered in the insertmany crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next method panics...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a security vulnerability in version 2021-01-26 and earlier, which stems from the fact that elements may be deleted twice if the .next method is wrong. No details of the vulnerability are available at th...
The vulnerability of the “next” parameter in the user interface of OpenStack Horizon services arises from the lack of a mechanism for controlling redirection to malicious websites. This allows attackers to access confidential data and compromise its integrity.
The vulnerability of the “next” parameter in the user interface of OpenStack Horizon is related to the lack of checks for this parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data and compromise its integrity...
Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2021-24914)
Huawei NGFW Module and others are products of Huawei, China.NGFW Module is a next-generation firewall NGFW module.USG6600 is a data-in-the-firewall product.Secospace USG6600 is a next-generation firewall product. A denial of service vulnerability exists in multiple Huawei products due to a module...
Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2021-24915)
Huawei NGFW Module and so on are products of Huawei China.NGFW Module is a next-generation firewall NGFW module.Huawei NIP6800 is a set of intrusion prevention system.Huawei NIP6300 is an intrusion prevention system mainly applicable to enterprises, schools, operators, and IDCs. A denial of servi...
Weak Password Vulnerability in Boda Next-Generation Firewall of Shanghai Boda Data Communication Co.
Boda NGFW Next Generation Firewall is a firewall product designed and launched by Shanghai Boda Data Communication Co., Ltd. for medium-sized network security demand scenarios such as enterprises, governments, hotels, hospitals, schools and so on. Shanghai BODA Data Communication Co., Ltd BODA NG...
CloudBees Jenkins Warnings Next Generation Plugin Improper Privileges Vulnerability
Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...
多款Huawei产品安全漏洞
Huawei NGFW Module and others are products of Huawei, China.NGFW Module is a next-generation firewall NGFW module.USG6600 is a data-in-the-firewall product.Secospace USG6600 is a next-generation firewall product. A denial of service vulnerability exists in multiple Huawei products due to a module...
Design/Logic Flaw
Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...
CVE-2021-21626
Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...
CVE-2021-21626
Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match...
Jenkins Warnings Next Generation 安全漏洞
Jenkins Warnings Next Generation is Jenkins open source an application plugin . The plug-in is used to collect compiler warnings or static analysis tools to report problems and visualize the results . A privilege impropriety vulnerability exists in Jenkins Warnings Next Generation Plugin version...
PT-2021-14669 · Jenkins · Jenkins Warnings Next Generation Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Warnings Next Generation Plugin versions 8.4.4 and earlier Description: The issue allows attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns mat...
File Upload Vulnerability in NGFW of Netcom Next Generation Firewall (CNVD-2021-24752)
Netcom Next Generation Firewall NGFW is an application layer firewall launched by Netcom Technology that can comprehensively deal with network threats. A file upload vulnerability exists in NGFW. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...