PT-2021-26831

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.295 Description: The issue is related to a use after free problem in the pch can rx normal function. This problem was introduced in version v2.6.37 and is fixed in version v4.4.295. The actual impact and...

PT-2021-26867

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.37 through 4.14.257 Description The issue is related to a use after free problem in the pch can rx normal function. This problem was introduced in version v2.6.37 and is fixed in version v4.14.258. The actual impact a...

PT-2021-26848

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.293 Description The issue is related to a use after free error in the pch can rx normal function. This problem was introduced in version v2.6.37 and is fixed in version v4.9.293. The actual impact and attack...

CVE-2021-44232

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

How We’re Protecting Customers & Staying Ahead of CVE-2021-44228

CVE-2021-44228 is a high profile vulnerability impacting multiple versions of a widely distributed Java software component, Apache Log4j 2. The specific vulnerability allows for unauthenticated remote code execution. For additional technical information, the team at LunaSec has an excellent...

UVI-2021-1002307 btrfs: fix memory ordering between normal and ordered work functions

btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002257 btrfs: fix memory ordering between normal and ordered work functions

btrfs: fix memory ordering between normal and ordered work functions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.162 by commit...

PT-2021-15033

Name of the Vulnerable Software and Affected Versions: iMaster NCE-Fabric version V100R019C10 Description: The issue is related to a XSS injection vulnerability. A module of the client does not verify the input sufficiently, allowing attackers to exploit this by modifying input after logging onto...

minio -- policy restriction issue

minio developers report: Looks like policy restriction was not working properly for normal users when they are not svc or STS accounts. svc accounts are now properly fixed to get right permissions when its inherited, so we do not have to set 'owner = true' sts accounts have always been using righ...

PT-2021-4707

Name of the Vulnerable Software and Affected Versions КРУГ-2000 affected versions not specified Description The issue is related to the absence of authentication for a critical function in the KrugCorrectTime.exe service of the КРУГ-2000 SCADA system. Exploitation of this issue may allow an...

Netgear NETGEAR 安全漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in Netgear NETGEAR that stems from a security misconfiguration in some NETGEAR devices that affects normal...

CVE-2021-37211

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks...

CVE-2021-22397

There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when they are be called. Attackers can exploit this vulnerability by performing these files to cause privilege escalation attack. This can compromise normal service...

Sourcegraph 信息泄露漏洞

Sourcegraph is an open source code search and navigation tool from Sourcegraph, Inc. in the United States. Sourcegraph suffers from a security vulnerability that stems from the fact that the site administration area can be accessed by a normal user, with all information and functionality properly...

QSAN Storage Manager Directory Traversal Vulnerability (CNVD-2021-50943)

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker to traverse files in an arbitrary directory...

DEBIAN-CVE-2020-28598

An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2020-28598

An out-of-bounds write vulnerability exists in the Admesh stlfixnormaldirections functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

PrusaSlicer 缓冲区错误漏洞

PrusaSlicer is a 3D printing data processing software. A security vulnerability exists in the Admesh stlfixnormaldirections function of Prusa Research PrusaSlicer 2.2.0 and Master, which originates from an out-of-bounds write. An attacker can trigger code execution by supplying a specially crafte...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker to traverse files in an arbitrary directory...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker with normal user privileges to traverse file...