CVE-2021-2381: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2021-2340: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Memcached. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Oracle Solaris Access Control Vulnerability

Oracle Solaris is a Unix-like operating system, and a security vulnerability exists in the Kernel component of Oracle Solaris version 11. An attacker could use the vulnerability to update, insert, or remove unauthorized access to certain data accessible to the product, and cause a partial denial ...

CVE-2021-2411: Undefined Security Weakness

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: JS module. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successfu...

PT-2021-7121

Name of the Vulnerable Software and Affected Versions Oracle Database Server version 19c Description The issue is related to insufficient input validation in the Core RDBMS component of Oracle Database Server. This allows a low-privileged attacker with Create Table privilege and network access vi...

Oracle MySQL Server input validation vulnerability

Oracle MySQL Server, a relational database from Oracle Corporation, has a security vulnerability in the Server: Memcached component of Oracle MySQL Server 8.0.25 and earlier. An attacker can exploit this vulnerability to cause a partial denial of service on MySQL Server...

CVE-2020-22741

An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...

CVE-2020-22741

An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...

Design/Logic Flaw

An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...

CVE-2020-22741

An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...

Xuperchain security vulnerabilities

Xuperchain is an application. It provides a blockchain infrastructure to build compliant blockchain network functions. version 3.6.0 of Xuperchain contains a security vulnerability that could be exploited by an attacker to obtain partial signatures in order to recover the private key of an...

PT-2024-11296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was reported in the Linux kernel, specifically in the tcindex set parms function. The issue arises from a non-freed perfect hash in tcindex partial destroy work. When tcind...

CVE-2021-0295

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

CVE-2021-0291

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

CVE-2021-0291

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

CVE-2021-25671

A vulnerability has been identified in RWG1.M12 All versions V1.16.16, RWG1.M12D All versions V1.16.16, RWG1.M8 All versions V1.16.16. Sending specially crafted ARP packets to an affected device could cause a partial denial-of-service, preventing the device to operate normally. A restart is neede...

openSUSE: Security Advisory for curl (openSUSE-SU-2021:1762-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-36382: Cleartext Transmission of Sensitive Information

Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint which accepts cleartext...

PT-2021-21262

Name of the Vulnerable Software and Affected Versions Devolutions Server versions prior to 2021.1.18 Devolutions Server LTS versions prior to 2020.3.20 Description The issue allows attackers to intercept private keys via a man-in-the-middle attack against the "connections/partial" endpoint, which...

OPENSUSE-SU-2021:1762-1 Security update for curl

This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure bsc1186114. - Allow partial chain verification jscSLE-17956 Have intermediate certificates in the trust store be treated as trust-anchors, in the same way as self-signed root CA...