PT-2021-19253 · Juniper Networks · Juniper Networks Src Series

Name of the Vulnerable Software and Affected Versions: Juniper Networks SRC Series versions prior to 4.13.0-R6 Description: An Information Exposure issue in Juniper Networks SRC Series devices configured for NETCONF over SSH allows the negotiation of weak ciphers. This could enable a remote...

CVE-2021-31380: Exposure of Sensitive Information to an Unauthorized Actor

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to disclose sensitive information in the HTTP response which allows the attacker to obtain sensitive...

CVE-2021-31352: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit thi...

CVE-2021-31381: Exposure of Sensitive Information to an Unauthorized Actor

A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system...

CVE-2021-31352

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit thi...

CVE-2021-41459

GPAC MP4Box (v1.0.1) contains a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1008 (szXmlFrom) leading to DoS. The issue is documented as CVE-2021-41459. Debian/DSA-5411 notes the fixed version for bullseye is gpac 1.0.1+dfsg1-4+deb11u2, indicating a package upgrade as ...

CVE-2021-41459: Out-of-bounds Write

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41459

Removed by vendor...

CVE-2021-41457

Removed by vendor...

Prototype Pollution

zrender is vulnerable to prototype pollution. An attacker is able to inject malicious property using merge and clone helper methods in the src/core/util.ts causing prototype pollution via proto...

The vulnerability of the testcase_read() function in the src/testcase.c component of the Libsolv library, which is related to buffer overflow in memory, allows a attacker to cause a service failure.

The vulnerability of the testcaseread function in the src/testcase.c component of the Libsolv library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2021-39227: Improperly Controlled Modification of Object Prototype Attributes

ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...

Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

...

CVE-2021-33930

Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

CVE-2021-33928

Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

CVE-2021-33928: Out-of-bounds Write

Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...

GHSA-QGM6-9472-PWQ7 Integer Overflow in openssl-src

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

CVE-2020-18971: Out-of-bounds Write

Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'...

CVE-2020-18972: Exposure of Resource to Wrong Sphere

Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'...

CVE-2021-38714: Integer Overflow or Wraparound

In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. The vulnerability is found in ssgLoadTGA function in src/ssg/ssgLoadTGA.cxx file...