PT-2021-9236

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue arises during the processing of storage SCM commands, where a time of check or time of use window exists, potentially leading to the use of an invalid pointer at a...

Fedora: Security Advisory for mingw-python-pillow (FEDORA-2021-15845d3abe)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

XWiki >= 11.4-rc-1, < 11.10.1, 12.x < 12.6.3, 12.7.x Privilege Escalation Vulnerability

XWiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-17770

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3060 versions prior to 1.11b04 HF2 Description: The issue allows remote authenticated users to inject arbitrary commands in an admin or root context. This is because SetVirtualServerSettings calls CheckArpTables, which calls popen...

Adobe Creative Cloud Desktop Application Arbitrary File Overwrite Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file overwrite vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute...

PT-2021-2410

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 11.6.x before 11.6.5.3 F5 BIG-IP versions 12.1.x before 12.1.5.3 F5 BIG-IP versions 13.1.x before 13.1.3.6 F5 BIG-IP versions 14.1.x before 14.1.4 F5 BIG-IP versions 15.1.x before 15.1.2.1 F5 BIG-IP versions 16.0.x before...

Fedora: Security Advisory for kernel-tools (FEDORA-2021-a2d3ad5dda)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for kernel (FEDORA-2021-8d45d297c6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2021-18734

Name of the Vulnerable Software and Affected Versions id-map crate through 2021-02-26 for Rust Description A double free issue can occur in the id-map crate due to panic in Drop impl. Specifically, this issue affects the IdMap::clone from, get or insert, and remove set functions. In clone from, i...

Fedora: Security Advisory for xen (FEDORA-2021-4c819bf1ad)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for xterm (FEDORA-2021-e7a8e79fa8)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libmysofa (FEDORA-2021-4e40ccb5e6)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for keylime (FEDORA-2021-5c01339c12)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python3.8 (FEDORA-2021-7d3a9004e2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-28491: Allocation of Resources Without Limits or Throttling

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-ab674d56bc)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-26752: Improper Neutralization of Special Elements used in an OS Command

NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data...

Fedora: Security Advisory for spice-vdagent (FEDORA-2021-09ce0cdfac)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-25493

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic...

PT-2021-11144

Name of the Vulnerable Software and Affected Versions: Oclean Mobile Application version 2.1.2 Description: The Oclean Mobile Application communicates with an external website using HTTP, making it possible to eavesdrop on the network traffic. The content of the HTTP payload is encrypted using XO...