CVE-2021-38999

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...

PT-2021-27907

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the perfetto trace...

kernel: DoS in rb_per_cpu_empty()

A lack of CPU resources in the Linux kernel tracing module functionality was found in the way users use the trace ring buffer in specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

CVE-2021-35233 HTTP TRACK & TRACE Methods Enabled

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

Solarwinds Kiwi Syslog Server 配置错误漏洞

Solarwinds Kiwi Syslog Server is an affordable Syslog management tool for network and system engineers from Solarwinds USA. It is used to receive syslog messages and Snmp traps from network devices routers, switches, firewalls, etc. and Linux®/Unix® hosts. A security vulnerability exists in...

PT-2021-20855

Name of the Vulnerable Software and Affected Versions: Kiwi Syslog Server versions 9.7.1 and earlier Description: The HTTP TRACK and TRACE methods are enabled, which can lead to the disclosure of sensitive information such as internal authentication headers appended by reverse proxies. These...

CVE-2021-35233: Undefined Security Weakness

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

NewStart CGSL MAIN 6.02 : nss Multiple Vulnerabilities (NS-SA-2021-0121)

The remote NewStart CGSL host, running version MAIN 6.02, has nss packages installed that are affected by multiple vulnerabilities: - When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

PT-2021-30213

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.9 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25987

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30033

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29982

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.4.149 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26218

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-26134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.10.69 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26038

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...