Heap Buffer Overflow

mujs:sid is vulnerable to heap buffer overflow. The vulnerability is caused by conflicting JumpList of nested try/finally statements...

NULL Pointer Dereference

gpac:sid is vulnerable to null pointer dereference. The vulnerability exists in gpac in the lsrreadid.part function, which causes a segmentation fault and application crash...

Improper Verification Of Signature

libreoffice:sid is vulnerable to Improper Verification of Cryptographic Signature. The vulnerability is manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both X509Data and KeyValue children of the KeyInfo tag. When opened, it causes LibreOffice t...

Out-of-bounds Memory Access

chromium:sid is vulnerable to out of bounds memory access. The vulnerability exist in A.scad file with no trailing newline allowing an out-of-bounds read during parsing of annotations...

SpoolFool

This is a code analysis of the AddUser repository. Classification: Exploit module/toolkit targeting Windows systems. Primary CVE ID: Not explicitly stated, but the code appears to be related to the exploitation of a vulnerability in the Windows NetAPI32 library. Target product/service: Windows...

CVE-2021-46308

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...

Denial Of Service (DoS)

binaryen:sid is vulnerable to denial of service. The vulnerability exits due to an assertion abort in wasm::handleunreachable...

SUSE-RU-2021:4173-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4149-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4127-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4126-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4117-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

SUSE-RU-2021:4095-1 Recommended update for samba

This update for samba fixes the following issues: The username map advice from the CVE-2020-25717 advisory note has undesired side effects for the local nt token. Fallback to a SID/UID based mapping if the name based lookup fails bsc1192849...

Information Disclosure

firefox:sid​ is vulnerable to information disclosure. Remote attackers are able to steal the authentication tokens via the final image URL...

Denial Of Service

wireshark:sid is vulnerable to denial of service attacks.Uncontrolled Recursion in the Bluetooth DHT dissector allows denial of service via packet injection or crafted capture file...

Arbitrary File Read

sphinxsearch:sid is vulnerable to arbitrary file reads by scattered file snippets...

Cross-site Scripting (XSS)

cacti:sid is vulnerable to cross-site scripting XSS attacks. Template import for the midwinter theme allows remote attackers to trigger XSS...

Cross-site Scripting (XSS)

roundcube:sid is vulnerable to cross-site scripting XSS attacks. The library is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message...

openSUSE 15 Security Update : samba (openSUSE-SU-2021:3662-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3662-1 advisory. - Windows Active Directory AD domains have by default a feature to allow users to create computer accounts, controlled by ms-DS-MachineAccountQuota...

samba -- Multiple Vulnerabilities

The Samba Team reports: CVE-2020-25717: A user in an AD Domain could become root on domain members. CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC. CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets. CVE-2020-25721:...