Information disclosure

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...

CVE-2021-38999

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...

PT-2021-22352

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance affected versions not specified Description The issue allows a local attacker to obtain sensitive information due to the inclusion of sensitive data within a trace. Recommendations At the moment, there is no information about ...

CVE-2021-38999: Exposure of Sensitive Information to an Unauthorized Actor

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...

CVE-2021-38999

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace...

IBM MQ Appliance information leakage vulnerability

IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM U.S.A. The IBM MQ Appliance is vulnerable to an information disclosure vulnerability that could be exploited by a local attacker to obtain sensitive information by including sensitiv...

PT-2021-27907

Name of the Vulnerable Software and Affected Versions perfetto affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the perfetto trace...

kernel: DoS in rb_per_cpu_empty()

A lack of CPU resources in the Linux kernel tracing module functionality was found in the way users use the trace ring buffer in specific way. Only privileged local users with CAPSYSADMIN capability could use this flaw to starve the resources causing denial of service...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

CVE-2021-35233 HTTP TRACK & TRACE Methods Enabled

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

NewStart CGSL MAIN 6.02 : nss Multiple Vulnerabilities (NS-SA-2021-0121)

The remote NewStart CGSL host, running version MAIN 6.02, has nss packages installed that are affected by multiple vulnerabilities: - When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel...

CVE-2021-35233: Undefined Security Weakness

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

PT-2021-20855

Name of the Vulnerable Software and Affected Versions: Kiwi Syslog Server versions 9.7.1 and earlier Description: The HTTP TRACK and TRACE methods are enabled, which can lead to the disclosure of sensitive information such as internal authentication headers appended by reverse proxies. These...

Solarwinds Kiwi Syslog Server configuration error vulnerability

Solarwinds Kiwi Syslog Server is an affordable Syslog management tool for network and system engineers from Solarwinds USA. It is used to receive syslog messages and Snmp traps from network devices routers, switches, firewalls, etc. and Linux®/Unix® hosts. A security vulnerability exists in...

CVE-2021-35233

The HTTP TRACK & TRACE methods were enabled in Kiwi Syslog Server 9.7.1 and earlier. These methods are intended for diagnostic purposes only. If enabled, the web server will respond to requests that use these methods by returning exact HTTP request that was received in the response to the client...

PT-2021-30005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 4.14.248 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26080

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.4.149 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-26218

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-30075

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.30 through 5.4.149 Description The issue is related to a use-after-free uaf in blk trace access after removal by sysfs. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...