Samba < 4.14.8 DoS Vulnerability

Samba is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

UBUNTU-CVE-2021-37750

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/dotgsreq.c via a FAST inner body that lacks a server field...

MIT Kerberos code-related vulnerabilities

MIT Kerberos is a Massachusetts Institute of Technology MIT software for authentication in network clusters.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

CVE-2021-0516

In p2pprocessprovdiscreq of p2ppd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

PT-2021-10908

Name of the Vulnerable Software and Affected Versions Realtek rtl8723de BLE Stack versions = 4.1 Description An issue in the Realtek rtl8723de BLE Stack allows remote attackers to cause a Denial of Service. This can be achieved by manipulating the interval field in the CONNECT REQ message...

idm:DL1 and idm:client security, bug fix, and enhancement update

bind-dyndb-ldap 11.3-1 - New upstream release - Resolves: rhbz1845211 ipa 4.8.7-12.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.8.7-12 - Require selinux sub package in the proper version Related: RHBZ1868432 - SELinux: do not double-define nodet and pkitomcatcertt...

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

CVE-2020-15886: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

PT-2020-14687

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 3.5 Description A SQL injection issue in the reportdata module allows attackers to execute arbitrary SQL commands. This is achieved by manipulating the req parameter of the "/module/reportdata/ip" endpoint...

PT-2020-13235

Name of the Vulnerable Software and Affected Versions Gazie version 7.32 Description A security issue was found where the installation of Gazie does not properly secure its own file /setup/install/setup.php. This allows unauthorized access to the file, which can be exploited to include arbitrary...

Saltstack 3000.1 Remote Code Execution

Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Exploit Author: Jasper Lievisse Adriaanse Vendor Homepage: https://www.saltstack.com/ Version: 3000.2, 2019.2.4, 2017., 2018. Tested on: Debian 10 with Salt 2019.2.0 CVE : CVE-2020-11651 and CVE-2020-11652 Discription:...

Denial Of Service (DoS)

java is vulnerable to denial of service DoS. The vulnerability exists as the Kerberos implementation improperly checked the sanity of AP-REQ requests, which could cause a denial of service condition in the receiving Java Virtual Machine...

PT-2019-10049

Name of the Vulnerable Software and Affected Versions: ASUSWRT version 3.0.0.4.384.20308 Description: A stack-based buffer overflow issue exists in the parse req queries function in wanduck.c due to a long string sent over UDP, potentially leading to an information leak. Recommendations: For...

CVE-2019-15938

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...

PT-2019-14483

Name of the Vulnerable Software and Affected Versions Pengutronix barebox versions prior to 2019.08.1 Description The issue is related to a remote buffer overflow in the nfs readlink req function located in fs/nfs.c. This occurs because a length field is directly used for a memcpy operation, whic...

PT-2019-8660

Name of the Vulnerable Software and Affected Versions Vera VeraEdge version 1.7.19 Vera Veralite version 1.7.481 Description An issue was discovered in the UPnP services provided by the devices, which are available on port 3480 and can also be accessed via port 80 using the url "/port 3480". The...

CVE-2018-11947

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

CVE-2018-11947: Double Free

The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

PT-2018-15279

Name of the Vulnerable Software and Affected Versions i-doit open version 1.11.2 Description The issue allows for Remote Code Execution due to the mishandling of ZIP archives. It involves an upload feature that permits an authenticated administrator to upload arbitrary files to the main website...

PT-2018-18997

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.1 Description The issue is related to a missing bounds check in the gatts process attribute req function of gatt sc.cc, which could lead to a read of uninitialized data. This might result in remote information...