SUSE-SU-2021:1652-1 Security update for redis

This update for redis fixes the following issues: redis was updated to 6.0.13: CVE-2021-29477: Integer overflow in STRALGO LCS command bsc1185729 CVE-2021-29478: Integer overflow in COPY command for large intsets bsc1185730 Cluster: Skip unnecessary check which may prevent failure detection Fix...

PT-2024-11190 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel related to the iommu/amd component. The issue occurs when switching a device between IOMMU and direct DMA through sysfs, which doe...

DEBIAN-CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

Code injection

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

UBUNTU-CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424 Prevent user enumeration using Guard or the new Authenticator-based Security

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424: Exposure of Sensitive Information to an Unauthorized Actor

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

CVE-2021-21424

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. ...

PT-2021-3445 · Symfony +3 · Symfony +3

Name of the Vulnerable Software and Affected Versions: Symfony versions prior to 3.4 Description: The issue is related to information disclosure, allowing a remote attacker to gain unauthorized access to protected information. The vulnerability is caused by the ability to enumerate users without...

Netgear Switch Discovery Protocol Privilege Escalation

The vulnerability of the Netgear Switch Discovery Protocol NSDP implementation of the NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116Ev2 microprogrammable switching devices is related to the use of a hashing algorithm that contains vulnerabilities. Exploiting this vulnerability could allow a...

CVE-2021-21507

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure...

CVE-2021-21507

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure...

CVE-2021-21507

CVE-2021-21507 affects Dell EMC Networking X-Series firmware versions before 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware before 2.0.0.82. The root cause is weak password encryption leading to potential disclosure of certain user credentials. An unauthenticated remote attacker could...

Dell EMC Networking X Series encryption vulnerabilities

The DELL Dell EMC Networking X-Series is an X-Series Ethernet switch from Dell USA. A security vulnerability exists in various Dell products, which can be exploited by remote attackers to potentially cause the disclosure of certain user credentials. The following products and versions are affecte...

PT-2021-14566

Name of the Vulnerable Software and Affected Versions Dell EMC Networking X-Series versions prior to 3.0.1.8 Dell EMC PowerEdge VRTX Switch Module versions prior to 2.0.0.82 Description The issue is related to weak password encryption, allowing a remote unauthenticated attacker to potentially...

CVE-2021-21507: Weak Encoding for Password

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure...

Weak Password Vulnerability in the Switch Centralized Management Platform of Beijing Wenwang Yilian Technology Co.

Beijing WENNET YILIAN Technology Co., Ltd. is a high-tech software enterprise. A weak password vulnerability exists in the switch centralized management platform of Beijing WENET YILIAN Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...