CVE-2021-36985

There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart...

Code injection

There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart...

CVE-2021-22461

CVE-2021-22461 concerns a HarmonyOS component with an allocation of resources without limits or throttling. The connected documents describe the issue as a local, non-privileged exploit that can cause nearby processes to crash. They do not provide technical specifics such as affected versions, vu...

CVE-2021-36985

There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart...

CVE-2021-36985

CVE-2021-36985: Concrete details in connected records indicate a code-injection vulnerability in Huawei smartphone software (EMUI/Magic UI on Android). It affects Huawei devices, enabling resource exhaustion and potential device reboot. Root cause: code injection in the Huawei smartphone stack. E...

CVE-2021-40114

Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper memory resource manageme...

CVE-2021-32951

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

Authentication flaw

WebAccess/NMS Versions prior to v3.0.3Build6299 has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS...

NewStart CGSL CORE 5.05 / MAIN 5.05 : spamassassin Vulnerability (NS-SA-2021-0159)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has spamassassin packages installed that are affected by a vulnerability: - In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the...

peakresourcesinc.com Improper Access Control vulnerability OBB-2204872

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData

A flaw was found in xstream, a simple library used to serialize objects to XML and back again. This flaw allows a remote attacker to request data from internal resources that are not publicly available by manipulating the processed input stream with Java runtime versions 14 to 8. The highest thre...

CamaleonCMS server-side request forgery vulnerability

Camaleon CMS is a RubyonRails-based advanced dynamic content management system CMS from the Camaleon CMS team. Camaleon CMS has a server-side request forgery vulnerability in versions 2.1.2.0 through 2.6.0, which stems from the product's failure to properly validate user input and can be exploite...

The vulnerability of the Restund server, related to the exposure of resources for the erroneous area, allows a hacker to execute arbitrary commands.

The vulnerability of the Restund server is related to the exposure of resources to an erroneous area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by setting the XOR-PEER-ADDRESS parameter to 127.0.0.1:restundudpstatusport...

SUSE SLED15 / SLES15 Security Update : xstream (SUSE-SU-2021:3476-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3476-1 advisory. - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the...

openSUSE 15 Security Update : util-linux (openSUSE-SU-2021:3474-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3474-1 advisory. - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources...

The vulnerabilities of the functions “Stealer::steal”, “Stealer::steal_batch”, and “Stealer::steal_batch_and_pop” in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow a malicious actor to execute arbitrary code.

The vulnerability of the functions “Stealer::steal”, “Stealer::stealbatch”, and “Stealer::stealbatchandpop” in browsers Mozilla Firefox, Firefox ESR, and the email client Thunderbird arises due to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this...

SUSE SLED12: libblkid-devel / libblkid1 / libblkid1-32bit / libfdisk1 / etc (SUSE-SU-2021:3475-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3475-1 advisory. - CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in getsemelements in sys-utils/ipcutils.c...

A Guide to Doing Cyberintelligence on a Restricted Budget

For those in the industry, it comes as no surprise that many cybersecurity programs have been impacted by loss of revenue during the pandemic. From cutting tooling and feed budgets to reduction in staff, it’s been challenging at best. In a recent SANS 2021 survey, “Threat Hunting In Uncertain...

Ruby: Arbitrary file injection via symlink attack in rdoc generator

Vulnerability description not provided...

Get career advice from 7 inspiring leaders in cybersecurity

Are you currently studying information security? Or are you considering transitioning to a career in cybersecurity? According to the US Bureau of Labor Statistics, cybersecurity jobs will grow 31 percent from 2019 to 2029—more than six times the national average job growth.1 Cybersecurity skills...