GHSA-G7P8-R2CH-4RMF Malicious Atomix node queries expose sensitive information

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

Google Chrome CORS Unauthorized Access

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information through a specially created we...

Researchers Uncover New Coexistence Attacks On Wi-Fi and Bluetooth Chips

Cybersecurity researchers have demonstrated a new attack technique that makes it possible to leverage a device's Bluetooth component to directly extract network passwords and manipulate traffic on a Wi-Fi chip, putting billions of electronic devices at risk of stealthy attacks. The novel attacks...

Atomix security vulnerabilities

Atomix is a fault-tolerant distributed coordination framework for JAVA 8. Atomix version 3.1.5 is vulnerable to an information disclosure vulnerability. An attacker could exploit this vulnerability to access sensitive information when a malicious Atomix node queries the distributed variable...

ksmbd security vulnerabilities

ksmbd is an open source kernel CIFS/SMB3 server created by Namjae Jeon for the Linux kernel. It is an implementation of the SMB/CIFS protocol in kernel space for sharing files and IPC services over a network. A security vulnerability exists in ksmbd server 3.4.2 and earlier versions, which result...

CVE-2021-39063

IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information due to a misconfiguration in access control headers. IBM X-Force ID: 214956...

Windows SMB Disclosure

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

IBM Spectrum Protect Plus access control vulnerability

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of all sizes.A security vulnerability exists in IBM Spectrum Protect...

CVE-2021-37040

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting...

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

Design/Logic Flaw

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

PT-2021-23728 · Kaseya · Kaseya Unitrends Backup Appliance

Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Samba file sharing service, allowing anonymous read/write access. Recommendations: For versions prior to 10.5.5, update to version 10.5.5 o...

CVE-2021-43039: Undefined Security Weakness

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

CVE-2021-43039

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access...

CVE-2021-43039

Affected product: Kaseya Unitrends Backup Appliance (prior to 10.5.5). Issue: Samba file sharing service allows anonymous read/write access, enabling potential unauthorized file creation/editing on vulnerable deployments. Root cause: misconfig/ flaw in Samba access on the Appliance leading to una...

Fedora: Security Advisory for gnome-remote-desktop (FEDORA-2021-ac23d9e47f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94820)

showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...

[SECURITY] Fedora 33 Update: gnome-remote-desktop-0.1.9-3.fc33

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment...

[SECURITY] Fedora 34 Update: gnome-remote-desktop-40.2-2.fc34

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment...

CVE-2021-22957

A Cross-Origin Resource Sharing CORS vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect applicati...