1907 matches found
Null pointer dereference
Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...
MikroTik RouterOS Memory Corruption Vulnerability (CNVD-2021-49780)
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/sniffer process. A remote attacker could...
MikroTik RouterOS 缓冲区错误漏洞
MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a denial of service null pointer dereference...
Mikrotik RouterOs 安全漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An...
MikroTik RouterOS 缓冲区错误漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/sniffer process. A remote attacker could...
Cybercriminals' Favorite Bulletproof VPN Service Shuts Down In Global Action
Law enforcement agencies from the US, Germany, Netherlands, Switzerland, France, along with Europol's European Cybercrime Centre EC3, announced today the coordinated takedown of Safe-Inet, a popular virtual private network VPN service that was used to facilitate criminal activity. The three domai...
Laravel Nova 3.7.0 Denial Of Service
Exploit Title: Laravel Nova 3.7.0 - 'range' DoS Date: June 22, 2020 Exploit Author: iqzer0 Vendor Homepage: https://nova.laravel.com/ Software Link: https://nova.laravel.com/releases Version: Version v3.7.0 Tested on: Manjaro / Chrome v83 An authenticated user can crash the application by setting...
Laravel Nova 3.7.0 - 'range' DoS
Exploit Title: Laravel Nova 3.7.0 - 'range' DoS Date: June 22, 2020 Exploit Author: iqzer0 Vendor Homepage: https://nova.laravel.com/ Software Link: https://nova.laravel.com/releases Version: Version v3.7.0 Tested on: Manjaro / Chrome v83 An authenticated user can crash the application by setting...
CVE-2020-9117
HUAWEI nova 4 versions earlier than 10.0.0.165C01E34R2P4 and SydneyM-AL00 versions earlier than 10.0.0.165C00E66R1P5 have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected...
CVE-2020-9117
HUAWEI nova 4 versions earlier than 10.0.0.165C01E34R2P4 and SydneyM-AL00 versions earlier than 10.0.0.165C00E66R1P5 have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected...
Design/Logic Flaw
HUAWEI nova 4 versions earlier than 10.0.0.165C01E34R2P4 and SydneyM-AL00 versions earlier than 10.0.0.165C00E66R1P5 have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected...
CVE-2020-9117
HUAWEI nova 4 versions earlier than 10.0.0.165C01E34R2P4 and SydneyM-AL00 versions earlier than 10.0.0.165C00E66R1P5 have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected...
CVE-2020-9117
The CVE-2020-9117 entry affects Huawei Nova 4 and SydneyM-AL00 devices with versions earlier than 10.0.0.165 (C01E34R2P4/C00E66R1P5). The vulnerability is an out-of-bounds read and write caused by insufficient validation of a crafted packet parameter, allowing exploitation by an attacker with spe...
Huawei nova 4 and Huawei Sydneym-al00 out-of-bounds read vulnerability
Huawei nova 4 and Huawei Sydneym-al00 are both a smart collection from Chinese company Huawei Huawei. A security vulnerability exists in Huawei nova 4 prior to 10.0.0.165 C01E34R2P4 and SydneyM-AL00 prior to 10.0.0.165 C00E66R1P5, which stems from insufficient input checksums for some of the...
多款Huawei产品缓冲区错误漏洞
Huawei nova 4 and Huawei Sydneym-al00 are both a smart collection from Chinese company Huawei Huawei. A security vulnerability exists in Huawei nova 4 prior to 10.0.0.165 C01E34R2P4 and SydneyM-AL00 prior to 10.0.0.165 C00E66R1P5, which stems from insufficient input checksums for some of the...
SUSE-SU-2020:2911-1 Security update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano, openstack-neutron, openstack-neutron-vpnaas, openstack-nova, openstack-sahara, python-Pillow, rubygem-crowbar-client
This update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano,...
SUSE-SU-2020:2876-1 Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-installer-ui, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-dashboard, openstack-ironic, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-infoblox, openstack-nova, python-Flask-Cors, rubygem-crowbar-client, storm, storm-kit, venv-openstack-cinder, venv-openstack-horizon
This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-installer-ui, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-dashboard, openstack-ironic, openstack-ironic-python-agent, openstack-manila,...
openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML
An information disclosure flaw was found in the live migration feature of OpenStack Nova. A user may gain access to destination host devices with the same path as those on the source host. This flaw allows an attacker to perform a soft reboot of an instance that has previously undergone live...
Important: Red Hat Security Advisory: openstack-nova security update
An update for openstack-nova is now available for Red Hat OpenStack Platform 10 Newton. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
openstack-nova: Soft reboot after live-migration reverts instance to original source domain XML
An information disclosure flaw was found in the live migration feature of OpenStack Nova. A user may gain access to destination host devices with the same path as those on the source host. This flaw allows an attacker to perform a soft reboot of an instance that has previously undergone live...