634 matches found
Mageia: Security Advisory (MGASA-2017-0064)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-10492 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.4-gentoo-parisc64 4 Description: The vulnerability is caused by overrunning the sglist and incorrectly testing sg dma lensglist before nents. Normally, this doesn't cause a crash, but in this case, sglist...
sg-sossenheim.de Cross Site Scripting vulnerability OBB-2323897
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2021-24218 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid free vulnerability exists via the gf sg command del function, which causes a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf sg command de...
Code injection
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8...
CVE-2021-36807
Sophos SG UTM (user portal) is affected by an SQL injection vulnerability that allows an authenticated user to potentially execute code. Root cause: improper SQL handling in the user portal before version 9.708 MR8. Impact: authenticated code execution with high severity; affects confidentiality,...
CVE-2021-36807
An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8...
Sophos SG UTM SQL注入漏洞
Sophos SG UTM is a security gateway from Sophos UK. The product is used to protect computer nodes on a local area network. A security vulnerability exists in the user portal prior to SG UTM version 9.708 MR8, through which an authenticated user may be able to execute code...
UVI-2021-1001850 dma-debug: fix sg checks in debug_dma_map_sg()
dma-debug: fix sg checks in debugdmamapsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...
GSD-2021-1001804 dma-debug: fix sg checks in debug_dma_map_sg()
dma-debug: fix sg checks in debugdmamapsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...
UVI-2021-1001804 dma-debug: fix sg checks in debug_dma_map_sg()
dma-debug: fix sg checks in debugdmamapsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit...
amway.sg Cross Site Scripting vulnerability OBB-2132596
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Sophos UTM Webadmin remote command execution
Added: 08/27/2021 Background Sophos UTM is a network security appliance. Problem A vulnerability in the Webadmin interface allows remote attackers to execute arbitrary commands by sending a specially crafted POST request. Resolution Upgrade to Sophos SG UTM v9.511 MR11, v9.607 MR7, or v9.705 MR5 ...
Sophos UTM Webadmin remote command execution
Added: 08/27/2021 Background Sophos UTM is a network security appliance. Problem A vulnerability in the Webadmin interface allows remote attackers to execute arbitrary commands by sending a specially crafted POST request. Resolution Upgrade to Sophos SG UTM v9.511 MR11, v9.607 MR7, or v9.705 MR5 ...
CVE-2021-30648
The Symantec Advanced Secure Gateway ASG and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance...
Kubernetes: AWS Load Balancer Controller Managed Security Groups can be replaced by an unprivileged attacker
Report Submission Form Summary: When creating an Ingress of class alb, by default, AWS Load Balancer Controller creates a managed SG and attaches it to the created ALB. This SG limits which ports of the ALB are accessible by whom. An attacker is able to craft another SG that can be used to trick...
PT-2024-11191
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability has been resolved in the Linux kernel, specifically in the drm/amdgpu component. The issue occurs when the ttm-sg variable is not set to NULL, leading to a...
Weak Password Vulnerability in SG-6000-E2300 of Shanshi Netcom
SG-6000-E2300 is a firewall product of Shanshi Netcom Technology Beijing Co. A weak password vulnerability exists in the SG-6000-E2300, which can be exploited by attackers to obtain sensitive information...
My AIA SG application security vulnerability
A security vulnerability exists in My AIA SG application 1.2.6 for Android that allows attackers to obtain user credentials via logcat due to excessive logging...
kernel: sg_write function lacks an sg_remove_request call in a certain failure case
A vulnerability was found in sgwrite in drivers/scsi/sg.c in the SCSI generic sg driver subsystem. This flaw allows an attacker with local access and special user or root privileges to cause a denial of service if the allocated list is not cleaned with an invalid Sgfd sfp pointer at the time of...