CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

Design/Logic Flaw

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

CVE-2021-3256

KuaiFanCMS V5.x has an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. The issue stems from the html_url parameter handling in that module, allowing an attacker to read arbitrary files and potentially obtain sensitive information. Multiple sources (C...

CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...

Denial Of Service (DoS)

Eclipse Mosquitto is vulnerable to denial of service. If an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

TP-Link TL-WR802N (US) and Archer_C50v5_US Buffer Overflow Vulnerability

The TP-Link TL-WR802N is a wireless router from China's P&L TP-Link. A buffer overflow vulnerability exists in the TP-Link TL-WR802N US and ArcherC50v5US v4200 version 2020.06 and earlier, which can be exploited by an attacker to remotely execute code...

CVE-2021-28166

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

CVE-2021-28166

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

Null pointer dereference

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

CVE-2021-28166

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

CVE-2021-28166

Eclipse Mosquitto broker (versions 2.0.0–2.0.9) is vulnerable to a NULL pointer dereference when an authenticated client that previously connected with MQTT v5 sends a crafted CONNACK message. Affected component: broker handling CONNACK under MQTT v5. Impact as per sources: availability impact HI...

CVE-2021-28166

In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur...

Security Bulletin: IBM API Connect V5 Developer Portal is vulnerable to cross-site scripting (CVE-2020-4838)

Summary IBM API Connect has addressed the following vulnerability Vulnerability Details CVEID: CVE-2020-4838 DESCRIPTION: IBM API Connect is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

CVE-2020-25494

Xinuos formerly SCO Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook...

Arbitrary File Download Vulnerability in Zhiyuan A8-V5 Collaboration Management Software

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet is a high-tech enterprise integrating product design, research and development, sales and service, providing customers with professional collaborative management software products, solutions, platforms and cloud services, and is a...

Backup repository upgrade fails after upgrading to v5

Challenge A local backup repository fails to upgrade after upgrading to Veeam Backup for Microsoft 365 5.0 version 5.0.0.1061. Cause In case when the Team Chat folder has been protected with the earlier version of Veeam Backup for Microsoft 365, a backup repository may contain items with several...

[SECURITY] Fedora 32 Update: krb5-1.18.2-29.fc32

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form...

Fedora: Security Advisory for krb5 (FEDORA-2020-27b577ab23)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for krb5 (FEDORA-2020-32193cbbe6)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use after free in the video driver leads to local privilege escalation CVE-2019-9458 kernel: use-after-free in drivers/bluetooth/hcildisc.c CVE-2019-15917 kernel: out-of-bounds access in...