CVE Archives - RedPacket Security

CVE prog

Vulnerabilities

CVE-2021-25314

May 10, 2021 admin CONFIRM, CVE, CVE-2021-25314, exploit, vulnerability

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9.

CVE prog

Vulnerabilities

CVE-2021-1501

May 9, 2021 admin cisco, CVE, CVE-2021-1501, Vendor Advisory, vulnerability

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an affected device. A successful exploit could allow the attacker to cause a crash and reload of the affected device.

CVE prog

Vulnerabilities

CVE-2021-1493

May 9, 2021 admin cisco, CVE, CVE-2021-1493, Vendor Advisory, vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks for specific data that is provided to the web services interface of an affected system. An attacker could exploit this vulnerability by sending a malicious HTTP request. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could disclose data fragments or cause the device to reload, resulting in a denial of service (DoS) condition.

CVE prog

Vulnerabilities

CVE-2021-31919

May 9, 2021 admin CVE, CVE-2021-31919, MISC, Third Party Advisory, vulnerability

An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

CVE prog

Vulnerabilities

CVE-2020-7731

May 9, 2021 admin CONFIRM, CVE, CVE-2020-7731, Third Party Advisory, vulnerability

This affects all versions of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.

CVE prog

Vulnerabilities

CVE-2021-25147

May 8, 2021 admin CVE, CVE-2021-25147, MISC, Vendor Advisory, vulnerability

A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.

CVE prog

Vulnerabilities

CVE-2021-21414

May 8, 2021 admin CVE, CVE-2021-21414, MISC, patch, vulnerability

Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. It only affects the `getPackedPackage` function and this function is not advertised and only used for tests & building our CLI, no malicious code was found after checking our codebase.

CVE prog

Vulnerabilities

CVE-2021-25811

May 8, 2021 admin CVE, CVE-2021-25811, MISC, Vendor Advisory, vulnerability

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.

CVE prog

Vulnerabilities

CVE-2020-21990

May 8, 2021 admin CVE, CVE-2020-21990, exploit, EXPLOIT-DB, vulnerability

Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information.

CVE prog

Vulnerabilities

CVE-2020-10947

May 7, 2021 admin CONFIRM, CVE, CVE-2020-10947, Vendor Advisory, vulnerability

Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation.

CVE prog

Vulnerabilities

CVE-2021-31791

May 7, 2021 admin CVE, CVE-2021-31791, MISC, Release Notes, vulnerability

In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command.

CVE prog

Vulnerabilities

CVE-2021-20401

May 7, 2021 admin CVE, CVE-2021-20401, VDB Entry, vulnerability, XF

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.

CVE prog

Vulnerabilities

CVE-2020-5013

May 7, 2021 admin CONFIRM, CVE, CVE-2020-5013, Vendor Advisory, vulnerability

IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 193245.

CVE prog

Vulnerabilities

CVE-2020-4932

May 7, 2021 admin CVE, CVE-2020-4932, VDB Entry, vulnerability, XF

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 191748.

CVE prog

Vulnerabilities

CVE-2020-22000

May 6, 2021 admin CVE, CVE-2020-22000, exploit, MISC, vulnerability

HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the ‘set_command_on’ and ‘set_command_off’ POST parameters in ‘/system/systemplugins/customcommand/customcommand.plugin.php’ by using an unsanitized PHP exec() function.

CVE prog

Vulnerabilities

CVE-2020-21989

May 6, 2021 admin CVE, CVE-2020-21989, exploit, EXPLOIT-DB, vulnerability

HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

CVE prog

Vulnerabilities

CVE-2017-9438

May 6, 2021 admin CONFIRM, CVE, CVE-2017-9438, Issue Tracking, vulnerability

libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule (involving hex strings) that is mishandled in the _yr_re_emit function, a different vulnerability than CVE-2017-9304.

CVE prog

Vulnerabilities

CVE-2019-19648

May 6, 2021 admin CVE, CVE-2019-19648, exploit, MISC, vulnerability

In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, resulting in Denial of Service (application crash) or potential code execution.

CVE prog

Vulnerabilities

CVE-2020-7226

May 5, 2021 admin CVE, CVE-2020-7226, exploit, MISC, vulnerability

CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with “new byte” may depend on untrusted input within the header of encoded data.

CVE prog

Vulnerabilities

CVE-2020-1763

May 5, 2021 admin CONFIRM, CVE, CVE-2020-1763, Issue Tracking, vulnerability

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.

CVE prog

Vulnerabilities

CVE-2021-26675

May 5, 2021 admin CVE, CVE-2021-26675, Mailing List, MISC, vulnerability

A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code.

CVE prog

Vulnerabilities

CVE-2021-21300

May 5, 2021 admin CVE, CVE-2021-21300, MISC, patch, vulnerability

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config –global core.symlinks false`), the described attack won’t work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6.

CVE prog

Vulnerabilities

CVE-2016-4971

May 5, 2021 admin CONFIRM, CVE, CVE-2016-4971, patch, vulnerability

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource.

CVE prog

Vulnerabilities

CVE-2020-27897

May 4, 2021 admin CVE, CVE-2020-27897, MISC, Vendor Advisory, vulnerability

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.