Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommufd: The content of the pages should no longer be destroyed after detaching from dmabuf. Sashiko points out that this issue was previously out of order; the mutex could still be in use through the dmabuf invalidation callback...

CVE-2020-6876

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

PT-2020-19287

Name of the Vulnerable Software and Affected Versions eVDC ZXCLOUD-iROSV6.03.04 Description The issue is caused by the lack of correct verification of client data in the WEB module, allowing a remote attacker to trigger an XSS attack by inserting malicious scripts into the web module. This could...