35 Archives - CVE Vulnerability

CVE-2020-10730

godfreyd94 — Fri, 03 Feb 2023 12:10:16 +0000

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

The post CVE-2020-10730 appeared first on CVE Vulnerability.

CVE-2020-7576

godfreyd94 — Fri, 03 Feb 2023 12:10:15 +0000

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim.

The post CVE-2020-7576 appeared first on CVE Vulnerability.

CVE-2020-7923

godfreyd94 — Fri, 03 Feb 2023 12:10:15 +0000

A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem’s support for geoNear. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.0-rc7; v4.2 versions prior to 4.2.8; v4.0 versions prior to 4.0.19.

The post CVE-2020-7923 appeared first on CVE Vulnerability.

CVE-2020-16845

godfreyd94 — Fri, 03 Feb 2023 12:10:14 +0000

Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.

The post CVE-2020-16845 appeared first on CVE Vulnerability.

CVE-2020-16251

godfreyd94 — Fri, 03 Feb 2023 12:10:13 +0000

HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.

The post CVE-2020-16251 appeared first on CVE Vulnerability.

CVE-2021-45925

godfreyd94 — Fri, 03 Feb 2023 12:10:12 +0000

Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-45925 appeared first on CVE Vulnerability.

CVE-2021-26732

godfreyd94 — Fri, 03 Feb 2023 12:10:12 +0000

A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.

The post CVE-2021-26732 appeared first on CVE Vulnerability.

CVE-2018-3868

godfreyd94 — Fri, 03 Feb 2023 12:10:11 +0000

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.

The post CVE-2018-3868 appeared first on CVE Vulnerability.