Updated cherokee packages fix security vulnerability

Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resources using a malformed Authorization header that is mishandled during a cherokeebufferadd call with...

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. This allows a perpetrator to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the Linux operating system’s kernel, related to information disclosure, allows attackers to gain access to protected information.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the KVM virtualization subsystem in the Linux operating system, related to the disclosure of information that allows a hacker to access protected data.

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

CVE-2020-27643

The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in protected directories where they would not normally have access to create or modify files via the creation of a junction point to a system...

1E Client 权限许可和访问控制问题漏洞

1E Client is an agent-less endpoint management software from 1E 1E Client USA. A security vulnerability exists in 1E Client versions 5.0.0.745, 4.1.0.267, which originates in the %PROGRAMDATA%1EClient directory that allows remote authenticated and local users to create and modify files in...

The vulnerability of the SCADA system MasterSCADA, related to the storage of passwords in a decipherable format, allows a intruder to decrypt the protected control project.

The vulnerability of the SCADA system MasterSCADA relates to the storage of passwords in a readable format. Exploiting this vulnerability could allow an attacker to decrypt the passwords and access the protected project...

The vulnerability of the X-server fly-dm, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to gain access to protected information.

The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Cisco Data Center Network Manager system, related to errors in permission processing, allows a intruder to gain access to protected information.

The vulnerability of the Cisco Data Center Network Manager system is related to errors in permission processing. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of Microsoft Exchange Server’s mail server, related to errors in memory object processing, allows attackers to gain access to protected information.

The vulnerability of Microsoft Exchange Server lies in errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to gain access to protected information from a remote location...

The vulnerability of the web interface of the Cisco Vision Dynamic Signage Director system allows a perpetrator to access protected information.

The vulnerability of the Cisco Vision Dynamic Signage Director digital content management web interface is related to errors in path limitation. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability in the implementation of the Windows SMB network protocol allows attackers to gain access to protected information.

The vulnerability of the Windows SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV, related to the lack of protection for operational data, allows a perpetrator to gain access to protected information.

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in code errors that allow attackers to disclose protected information.

The vulnerability of software packages in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation is related to code errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers allows a perpetrator to gain access to protected information.

The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of the Bubblewrap application, related to insecure management of privileges, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Bubblewrap application is related to insecure handling of privileges. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Fanuc 32i numerical program-controlled controller stems from deficiencies in the storage of protected information, allowing attackers to copy or modify user files and system files.

The vulnerability of the numerical program-controlled controller Fanuc 32i is related to deficiencies in the storage of protected information. Exploiting this vulnerability could allow an intruder to copy or modify user files and system files...

The vulnerability of the urldecode() function in the PHP programming language, related to reading beyond the allowable buffer data limits, allows attackers to gain access to protected information.

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protected information...