Vulnerabilities Archives - RedPacket Security

CVE-2020-13949

May 10, 2021 admin CVE, CVE-2020-13949, Mailing List, MISC, vulnerability

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Vulnerabilities

CVE-2020-13949

May 10, 2021 admin CVE, CVE-2020-13949, Mailing List, MISC, vulnerability

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Vulnerabilities

CVE-2020-13949

May 10, 2021 admin CVE, CVE-2020-13949, Mailing List, MISC, vulnerability

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Vulnerabilities

CVE-2021-31422

May 10, 2021 admin CVE, CVE-2021-31422, MISC, Vendor Advisory, vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the e1000e virtual device. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12527.

Vulnerabilities

CVE-2021-21531

May 10, 2021 admin CONFIRM, CVE, CVE-2021-21531, Vendor Advisory, vulnerability

Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.

Vulnerabilities

CVE-2021-25314

May 10, 2021 admin CONFIRM, CVE, CVE-2021-25314, exploit, vulnerability

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9.

Vulnerabilities

CVE-2021-1501

May 9, 2021 admin cisco, CVE, CVE-2021-1501, Vendor Advisory, vulnerability

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an affected device. A successful exploit could allow the attacker to cause a crash and reload of the affected device.

Vulnerabilities

CVE-2021-1493

May 9, 2021 admin cisco, CVE, CVE-2021-1493, Vendor Advisory, vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks for specific data that is provided to the web services interface of an affected system. An attacker could exploit this vulnerability by sending a malicious HTTP request. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could disclose data fragments or cause the device to reload, resulting in a denial of service (DoS) condition.

Vulnerabilities

CVE-2021-31919

May 9, 2021 admin CVE, CVE-2021-31919, MISC, Third Party Advisory, vulnerability

An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

Vulnerabilities

CVE-2020-7731

May 9, 2021 admin CONFIRM, CVE, CVE-2020-7731, Third Party Advisory, vulnerability

This affects all versions of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

Vulnerabilities

CVE-2021-25147

May 8, 2021 admin CVE, CVE-2021-25147, MISC, Vendor Advisory, vulnerability

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.

Vulnerabilities

CVE-2021-21414

May 8, 2021 admin CVE, CVE-2021-21414, MISC, patch, vulnerability

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. It only affects the `getPackedPackage` function and this function is not advertised and only used for tests & building our CLI, no malicious code was found after checking our codebase.

Vulnerabilities

CVE-2021-25811

May 8, 2021 admin CVE, CVE-2021-25811, MISC, Vendor Advisory, vulnerability

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.

Vulnerabilities

CVE-2020-21990

May 8, 2021 admin CVE, CVE-2020-21990, exploit, EXPLOIT-DB, vulnerability

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.

Vulnerabilities

CVE-2020-10947

May 7, 2021 admin CONFIRM, CVE, CVE-2020-10947, Vendor Advisory, vulnerability

Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.

Vulnerabilities

CVE-2021-31791

May 7, 2021 admin CVE, CVE-2021-31791, MISC, Release Notes, vulnerability

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command.

Vulnerabilities

CVE-2021-20401

May 7, 2021 admin CVE, CVE-2021-20401, VDB Entry, vulnerability, XF

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.

Vulnerabilities

CVE-2020-5013

May 7, 2021 admin CONFIRM, CVE, CVE-2020-5013, Vendor Advisory, vulnerability

IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.

Vulnerabilities

CVE-2020-4932

May 7, 2021 admin CVE, CVE-2020-4932, VDB Entry, vulnerability, XF

Vulnerabilities

CVE-2020-22000

May 6, 2021 admin CVE, CVE-2020-22000, exploit, MISC, vulnerability

HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the ‘set_command_on’ and ‘set_command_off’ POST parameters in ‘/system/systemplugins/customcommand/customcommand.plugin.php’ by using an unsanitized PHP exec() function.

Vulnerabilities

CVE-2020-21989

May 6, 2021 admin CVE, CVE-2020-21989, exploit, EXPLOIT-DB, vulnerability

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Vulnerabilities

CVE-2017-9438

May 6, 2021 admin CONFIRM, CVE, CVE-2017-9438, Issue Tracking, vulnerability

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304.

Vulnerabilities

CVE-2019-19648

May 6, 2021 admin CVE, CVE-2019-19648, exploit, MISC, vulnerability

In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, resulting in Denial of Service (application crash) or potential code execution.

Vulnerabilities

CVE-2020-7226

May 5, 2021 admin CVE, CVE-2020-7226, exploit, MISC, vulnerability

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with “new byte” may depend on untrusted input within the header of encoded data.