CVE-2021-28464

VP9 Video Extensions Remote Code Execution Vulnerability...

@scullyio/init (=1.0.0-beta.4) potentially affected by CVE-2020-28470 via @scullyio/ng-lib (=1.0.0-beta.1)

@scullyio/ng-lib NPM version =1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/ng-lib and may be impacted: - @scullyio/init =1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

CVE-2021-29424

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

UBUNTU-CVE-2021-3467

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened...

CVE-2021-1453

A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. The vulnerability is due to an improper check in the code functi...

JasPer 代码问题漏洞

JasPer is a C-based tool for image processing from the individual developer Michael Adams. The software supports the JPEG-2000 format as defined in ISO/IEC 15444-1 and is primarily used for image encoding and processing. Jasper suffers from a code issue vulnerability that can be exploited by an...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +27 more potentially affected by CVE-2020-24583 via django (>=3.0.0 <=3.0.0rc1)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2020-24583 Source advisory: OSV:GHSA-M6GJ-H9GM-GW44...

CVE-2021-22887

A vulnerability in the BIOS of Pulse Secure PSA-Series Hardware models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device...

KB5001640: March 9, 2021 update causes Windows 8.1 and Server 2012 R2 to not print graphical content

KB5001640: March 9, 2021 update causes Windows 8.1 and Server 2012 R2 to not print graphical content Summary This update resolves the following issue: Addresses an issue that fails to print the graphical content in a document after installing the March 9, 2021 update. Known issues in this update ...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

CVE-2020-27632

creationtimestamp| type| source ---|---|--- 2021-03-10 20:53:18+00:00| seen| https://t.me/cibsecurity/24719 2021-03-17 14:10:51+00:00| seen| https://t.me/icscert/398...

CVE-2020-5016

creationtimestamp| type| source ---|---|--- 2021-03-10 18:53:04+00:00| seen| https://t.me/cibsecurity/24685...

OPENSUSE-SU-2021:0397-1 Security update for mbedtls

This update for mbedtls fixes the following issues: - mbedtls was updated to version 2.16.9 - CVE-2020-10932: Fixed side channel in ECC code that allowed an adversary with access to precise enough timing and memory access information typically an untrusted operating system attacking a secure...

thorn-linux

This is a Debian-based research and development platform for information security called Thorn Linux. It is designed to keep users up to date with the latest cybersecurity news while providing a hardened and anonymized penetration-testing environment. The platform includes a highly customized...

CVE-2020-11218

creationtimestamp| type| source ---|---|--- 2021-03-03 04:59:01+00:00| seen| https://t.me/cKure/4155 2021-03-17 11:31:04+00:00| seen| https://t.me/cibsecurity/25001...

CVE-2020-11204

creationtimestamp| type| source ---|---|--- 2021-03-03 04:59:01+00:00| seen| https://t.me/cKure/4155 2026-01-20 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

PT-2021-2260 · Cisco · Cisco Asr 5000 Series

Name of the Vulnerable Software and Affected Versions: Cisco ASR 5000 Series Software StarOS affected versions not specified Description: A vulnerability in the ipsecmgr process could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This issue is due to...

CVE-2020-4725

creationtimestamp| type| source ---|---|--- 2021-03-02 20:44:31+00:00| seen| https://t.me/cibsecurity/24350...

The vulnerability in the internal file management service of the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches allows a attacker to rewrite arbitrary files.

The vulnerability of the internal file management service in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches lies in the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...