CVE-2021-3177 : A vulnerability in Python 3 may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

Affected Versions:
Python Versions 3.X up to 3.6.12
Python Versions 3.7.0 up to 3.7.9
Python Versions 3.8.0 up to 3.8.7
Python Versions 3.9.0 up to 3.9.1

CVE-2021-23336 : A vulnerability in python may lead to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. Affected Versions:
Python Versions 0.X up to 3.6.12
Python Versions 3.7.0 up to 3.7.9
Python Versions 3.8.0 up to 3.8.7
Python Versions 3.9.0 up to 3.9.1

QID Detection Logic(Authenticated):
Detects the installed python version either from py.exe or patchlevel.h file.

Following security issues were discovered:
CVE-2021-0473, CVE-2021-0474, CVE-2021-0475,CVE-2020-25705, CVE-2020-11246, CVE-2020-11234, CVE-2020-15436, CVE-2020-29368, CVE-2020-11251, CVE-2020-11236, CVE-2020-11247, CVE-2020-11237, CVE-2020-11191, CVE-2020-11255, CVE-2020-11243, CVE-2021-0445, CVE-2021-0428, CVE-2021-0472, CVE-2021-0485, CVE-2021-0487, CVE-2021-0482, CVE-2021-0484, CVE-2021-0476, CVE-2021-0477, CVE-2021-0481, CVE-2021-0466, CVE-2021-0480,CVE-2021-0375, CVE-2021-0387, CVE-2021-0369, CVE-2021-0382, CVE-2021-0368, CVE-2021-0374, CVE-2021-0378, CVE-2021-0379, CVE-2021-0384, CVE-2021-0370, CVE-2021-0372, CVE-2021-0377, CVE-2021-0380, CVE-2021-0383, CVE-2021-0386, CVE-2021-0388, CVE-2021-0371

Affected Products :
G series (G5, G6, G7, G8), V series(V10, V20, V30, V35, V40, V50) , Q Series(Q6, Q8) , X Series(X300, X400, X500, X cam), CV Series(CV1, CV3, CV5, CV7, CV1S, CV7AS), MH(K40, K50, Q60, Q70)

Following security issues were discovered:
CVE-2021-0473 , CVE-2021-0474 , CVE-2021-0475 , CVE-2020-11210,CVE-2020-15436 , CVE-2020-25705 , CVE-2021-0468 , CVE-2020-11234 , CVE-2020-11191 , CVE-2020-11236 , CVE-2020-11237 , CVE-2020-11242 , CVE-2020-11243 , CVE-2020-11245 , CVE-2020-11246 , CVE-2020-11247 , CVE-2020-11251 , CVE-2020-11252 , CVE-2020-11255 , CVE-2021-0445 , CVE-2021-0428 , CVE-2021-0472 , CVE-2021-0485 , CVE-2021-0487 , CVE-2021-0482 , CVE-2021-0484 , CVE-2021-0476 , CVE-2021-0477 , CVE-2021-0481 , CVE-2021-0466 , CVE-2021-0480

Affected Products :
G series (G5, G6, G7, G8), V series(V10, V20, V30, V35, V40, V50) , Q Series(Q6, Q8) , X Series(X300, X400, X500, X cam), CV Series(CV1, CV3, CV5, CV7, CV1S, CV7AS), MH(K40, K50, Q60, Q70)

Following security issues were discovered:
CVE-2020-0000

Affected Devices :
HUAWEI P series: P30 Pro, P30, P20 Pro, P20
HUAWEI Mate series: Mate 20 X, Mate 20 Pro, Mate 20, Mate 20 RS, Mate 10 Pro, Mate 10, PORSCHE DESIGN HUAWEI Mate RS

Following security issues were discovered:
CVE-2020-11295,CVE-2020-11294,CVE-2020-11293,CVE-2020-11254,CVE-2020-25656,CVE-2020-27825,CVE-2020-27786

Affected Products :
Pixel 4 XL, Pixel 4, Pixel 3a XL, Pixel 3a, Pixel 3 XL, Pixel 3, Pixel 2 XL, Pixel 2

Security Fix(es): bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1469 to address this issue and obtain more information.

Security Fix(es): bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
Red Hat Enterprise Linux Server - AUS 7.7 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
Red Hat Enterprise Linux Server - TUS 7.7 x86_64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.7 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.7 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1477 to address this issue and obtain more information.

Security Fix(es): bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
Red Hat Enterprise Linux Server - AUS 7.6 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
Red Hat Enterprise Linux Server - TUS 7.6 x86_64
Red Hat Enterprise Linux for Power 9 7 ppc64le
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.6 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6 x86_64
Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1478 to address this issue and obtain more information.

CVE-2017-3161: ebHDFS client might send SPNEGO authorization header to remote URL without proper verification. A crafty user can trigger services to send server credentials to a webhdfs path for capturing the service principal.

Affected Versions:
Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, 2.0.0-alpha to 2.10.0

QID Detection Logic:
This QID matches the versions of vulnerable Apache Hadoop installations by launching a Hadoop version request.

Workaround:
Set different http signature secrets and use dedicated hosts for each privileged impersonation service (such as HiveServer2).

Security Fix(es): postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694) postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695) postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1512 to address this issue and obtain more information.

Security Fix(es): tcmu-runner: SCSI target (LIO)
write to any block on ILO backstore (CVE-2021-3139) ceph: mgr modules' passwords are in clear text in mgr logs (CVE-2020-25678)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Ceph Storage MON 4 for RHEL 8 x86_64
Red Hat Ceph Storage MON 4 for RHEL 7 x86_64
Red Hat Ceph Storage OSD 4 for RHEL 8 x86_64
Red Hat Ceph Storage OSD 4 for RHEL 7 x86_64
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Ceph Storage for Power 4 for RHEL 8 ppc64le
Red Hat Ceph Storage for Power 4 for RHEL 7 ppc64le
Red Hat Ceph Storage MON for Power 4 for RHEL 8 ppc64le
Red Hat Ceph Storage MON for Power 4 for RHEL 7 ppc64le
Red Hat Ceph Storage OSD for Power 4 for RHEL 8 ppc64le
Red Hat Ceph Storage OSD for Power 4 for RHEL 7 ppc64le
Red Hat Ceph Storage for IBM z Systems 4 s390x
Red Hat Ceph Storage MON for IBM z Systems 4 s390x
Red Hat Ceph Storage OSD for IBM z Systems 4 s390x

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1452 to address this issue and obtain more information.

Following security issues were discovered:
CVE-2021-0497,CVE-2021-0496,CVE-2021-0495,CVE-2021-28664,CVE-2021-28663,CVE-2021-0492,CVE-2021-0491,CVE-2021-0490,CVE-2021-1906,CVE-2021-0498,CVE-2021-0494,CVE-2021-0493,CVE-2021-0324,CVE-2021-0475,CVE-2021-0474,CVE-2021-0477,CVE-2021-0476,CVE-2021-0473,CVE-2021-0472,CVE-2021-1910,CVE-2021-0480,CVE-2021-0481,CVE-2021-0482,CVE-2021-0484,CVE-2021-0485,CVE-2021-0487,CVE-2020-29661,CVE-2021-0489,CVE-2020-11288,CVE-2020-11284,CVE-2020-11285,CVE-2021-1915,CVE-2021-1905,CVE-2020-11279,CVE-2021-1891,CVE-2020-11289,CVE-2021-0466,CVE-2021-0467,CVE-2020-11273,CVE-2020-11274,CVE-2021-1927,CVE-2019-2219

Affected Products
The vulnerable driver dbutil_2_3.sys was delivered to impacted systems in two ways: 1 via affected firmware update utility packages, and 2 via Dell Command Update, Dell Update, Alienware Update, Dell System Inventory Agent, or Dell Platform Tags

Workaround:
Manually remove the dbutil_2_3.sys driver, following locations need to checks for the presence of the file
- C:\Users\username\AppData\Local\Temp
- C:\Windows\Temp

Security Fix(es): kernel: Use after free via PI futex state (CVE-2021-3347) kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: powerpc: guest can cause DoS on POWER9 KVM hosts (CVE-2020-11669)

Affected Products:

Red Hat Enterprise Linux for Power 9 7 ppc64le
Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1379 to address this issue and obtain more information.

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Affected OS: EulerOS V2.0SP3

Puppet Server 5.x (PE 2018.1.Z) end of life date of January 31, 2021.
Puppet server 6.x (2019.8) before 6.15 are not supported

Affected Versions:
Puppet Server version before 6.15

QID Detection Logic:(Unauthenticated)
This QID sends a crafted GET request to check the vulnerable version of puppet server .

CVE-2021-23010: When the BIG-IP ASM system processes WebSocket requests with JSON payloads using the default JSON content profile in the ASM security policy, the BIG-IP ASM bd process may produce a core file.

Vulnerable Component: BIG-IP ASM

Affected Versions:
16.0.0 - 16.0.1
15.1.0 - 15.1.1
14.1.0 - 14.1.3
13.1.0 - 13.1.3
12.1.0 - 12.1.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

An issue was found within the IBM MQ Java and JMS client libraries that could allow an attacker to execute a remote code execution attack.

Affected Versions:

IBM MQ 9.2.0
IBM MQ 9.1.0
IBM MQ 9.0.0
IBM MQ 8.0.0
IBM MQ 7.5.0
Operating System: Windows
It checks for vulnerable IBM MQ/WebSphere MQ versions.
Operating System: Linux
The QID executes /opt/mqm/bin/dspmqver -v | grep -A3 '^Name' to see if the system is running a vulnerable version of IBM MQ or not.

Affected software:
BIND 9.0.0 -> 9.11.29
BIND 9.12.0 -> 9.16.13
BIND 9.9.3-S1 -> 9.11.29-S1
BIND 9.16.8-S1 -> 9.16.13-S1
BIND 9.17.0 -> 9.17.11

Patched Versions:
BIND 9.11.31
BIND 9.16.15
BIND 9.17.12
BIND 9.11.31-S1
BIND 9.16.15-S1

QID Detection Logic:
This unauthenticated check detects vulnerable systems by fetching the version information from the BIND service.

CVE-2021-25216: A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack. Affected software:
BIND 9.5.0 -> 9.11.29
BIND 9.12.0 -> 9.16.13
BIND 9.11.3-S1 -> 9.11.29-S1
BIND 9.16.8-S1 -> 9.16.13-S1
BIND 9.17.0 -> 9.17.1

Patched Versions:
BIND 9.11.31
BIND 9.16.15
BIND 9.11.31-S1
BIND 9.16.15-S1

QID Detection Logic:
This unauthenticated check detects vulnerable systems by fetching the version information from the BIND service.

Cywin git package is affected to execute arbitrary code as soon as the repository is checked out.

Affected Versions:
Cygwin git package version prior to 2.31.1-2

QID Detection Logic (authenticated):
The QID flags if it finds a vulnerable version of the git package in installed file. The location of the file is determined by the key "HKLM\SOFTWARE\Cygwin\setup", value "rootdir". The file is present in the <rootdir>\etc\setup folder.

All versions starting with 13.8: Read API scoped tokens can execute mutations
All versions starting with 11.6: Pull mirror credentials were exposed
All versions starting with 13.2: Denial of Service when querying repository branches API
All versions prior to 13.5: Non-owners can set system_note_timestamp when creating / updating issues
All versions starting from 13.7: DeployToken will impersonate a User with the same ID when using Dependency Proxy

Affected Versions:
All version starting with 13.8
All versions starting with 11.6
All versions starting with 13.2
All versions prior to 13.5
All versions of Gitlab EE/CE starting with 13.7

QID Detection Logic:(Authenticated)
It fires gitlab-rake gitlab:env:info command to check vulnerable version of GitLab.

Vulnerability allows a remote attackers to bypass authentication.

Affected Versions:
OpenVPN 2.5.1 and earlier (except 2.4.11)

ClickHouse is vulnerable to multiple vulnerabilities

Affected Versions:
Prior to ClickHouse version 1.1.54131

QID Detection Logic:
This QID uses command clickhouse-client to get the version from the linux system

Affected Versions:

Kong docker images before 1.0.2-alpine (Alpine specific)

QID Detection Logic:
This QID checks for the vulnerable version of Kong Docker.

Following security issues are observed :
A buffer overflow issue was addressed with improved memory handling. CVE-2021-30666
A memory corruption issue was addressed with improved state management. CVE-2021-30665
An integer overflow was addressed with improved input validation. CVE-2021-30663
A use after free issue was addressed with improved memory management. CVE-2021-30661

Affected Devices
iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation)

Following security issues are observed :
A memory corruption issue was addressed with improved state management. CVE-2021-30665
An integer overflow was addressed with improved input validation. CVE-2021-30663

Affected Devices
iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)

It was discovered that Exim contained multiple security issues.

An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges.

Apache Unomi allowed remote attackers to send malicious requests with MVEL and OGNL expressions that could contain arbitrary classes, resulting in Remote Code Execution (RCE) with the privileges of the Unomi application.

Affected Versions:
This vulnerability affects all versions of Apache Unomi prior to 1.5.2

QID Detection Logic (Authenticated):
This QID sends HTTP POST payloads to URL "/context.json".

Refer to CVE-2020-13942: Remote Code Execution in Apache Unomi for more information about patching this vulnerability.

Microsoft Edge based on Chromium is affected by the following vulnerabilities:
CVE-2021-21227: Insufficient data validation in V8.
CVE-2021-21228: Insufficient policy enforcement in extensions.
CVE-2021-21229: Incorrect security UI in downloads.
CVE-2021-21230: Type Confusion in V8.
CVE-2021-21231: Insufficient data validation in V8.
CVE-2021-21232: Use after free in Dev Tools.
CVE-2021-21233: Heap buffer overflow in ANGLE.
QID Detection Logic: (authenticated)
Operating System: Windows
The install path is checked via registry "HKLM\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\shell\open\command". The version is checked via file msedge.exe.

Multiple vulnerabilities have been found in WebkitGTK+, the worst of which could result in the arbitrary execution of code.

Affected Package: - net-libs/webkit-gtk

Affected version: Prior to 2.30.6

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been found in GRUB, the worst might allow for circumvention of UEFI Secure Boot.

Affected Package: sys-devel/grub

Affected version: Prior to 2.06_rc1

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

A vulnerability in X.Org X Server may allow users to escalate privileges.

Affected Package: x11-base/xorg-server

Affected version: Prior to 1.20.11

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Following security issues are observed :
This issue was addressed with improved checks. CVE-2021-1835
A certificate validation issue was addressed. CVE-2021-1837
An out-of-bounds read was addressed with improved input validation. CVE-2021-1867
An issue in code signature validation was addressed with improved checks. CVE-2021-1849
A logic issue was addressed with improved restrictions. CVE-2021-1836
A memory corruption issue was addressed with improved validation. CVE-2021-1808
A memory initialization issue was addressed with improved memory handling. CVE-2021-1857
An out-of-bounds read was addressed with improved input validation. CVE-2021-1846
A memory corruption issue was addressed with improved validation. CVE-2021-1809
A validation issue was addressed with improved logic. CVE-2021-30659
A logic issue was addressed with improved state management. CVE-2021-1811
A logic issue was addressed with improved state management. CVE-2021-1872
An out-of-bounds read was addressed with improved input validation. CVE-2021-1881
A memory corruption issue was addressed with improved validation. CVE-2021-1882
A validation issue was addressed with improved logic. CVE-2021-1813
An access issue was addressed with improved memory management. CVE-2021-30656
This issue was addressed with improved checks. CVE-2021-1883
A race condition was addressed with improved locking. CVE-2021-1884
An out-of-bounds read was addressed with improved bounds checking. CVE-2021-1885
This issue was addressed with improved checks. CVE-2021-30653
An out-of-bounds write issue was addressed with improved bounds checking. CVE-2021-1858
A use after free issue was addressed with improved memory management. CVE-2021-1864
An out-of-bounds read was addressed with improved input validation. CVE-2021-1877
A logic issue was addressed with improved state management. CVE-2021-1874
A memory initialization issue was addressed with improved memory handling. CVE-2021-1860
A buffer overflow was addressed with improved bounds checking. CVE-2021-1816
The issue was addressed with improved permissions logic. CVE-2021-1832
An out-of-bounds read was addressed with improved bounds checking. CVE-2021-30660
A race condition was addressed with additional validation. CVE-2021-30652
A double free issue was addressed with improved memory management. CVE-2021-1875
A logic issue was addressed with improved restrictions. CVE-2021-1822
An issue obscuring passwords in screenshots was addressed with improved logic. CVE-2021-1865
A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2021-1815
A validation issue was addressed with improved input sanitization. CVE-2021-1807
The issue was addressed with improved permissions logic. CVE-2021-1831
A logic issue was addressed with improved state management. CVE-2021-1868
A call termination issue with was addressed with improved logic. CVE-2021-1854
The issue was addressed with improved UI handling. CVE-2021-1848
An input validation issue was addressed with improved input validation. CVE-2021-1825
A memory corruption issue was addressed with improved state management. CVE-2021-1817
A logic issue was addressed with improved restrictions. CVE-2021-1826
A memory initialization issue was addressed with improved memory handling. CVE-2021-1820
A use after free issue was addressed with improved memory management. CVE-2021-30661
A use after free issue was addressed with improved memory management. CVE-2020-7463

Affected Devices
iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Products:

centos 7

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Qualys Research Team has discovered 21 vulnerabilities (11 local vulnerabilities and 10 remote vulnerabilities) that affect Exim mail Server. It has been given the name 21Nails. The bugs can be leveraged to elevate privileges to root, execute code remotely among other attacks.

Affected Versions:
Exim versions prior to 4.94.2

QID Detection Logic (Unauthenticated):
The QID checks for the SMTP banner to check for vulnerable versions of exim.

QID Detection Logic (Authenticated):
The QID checks for vulnerable versions of exim by running command "exim --version".

CVE-2021-25297-An OS command injection as the apache user through variables passed into the Config Wizard.
CVE-2021-25298-An OS command injection as the apache user through variables passed into the Config Wizard.
CVE-2021-25299-XSS vulnerability in the SSH Terminal page.
Affected version:
Version: 5.7.5

QID Detection Logic:(Authenticated)
It will check for vulnerable version of Nagios Core from version file.

Support for Ubuntu 16.04 ended on April 30th, 2021. Ubuntu Security Notices will no longer include information or updated packages for Ubuntu 16.04

QID Detection Logic:
The QID checks for the vulnerable version of Ubuntu.

Affected Product:
Oracle Linux 7

HPE Integrated Lights-Out (iLO) is an embedded server management technology used for out-of-band management. A potential security vulnerability has been identified in Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware.

Affected Versions:
HP Integrated Lights-Out 5 (iLO 4) firmware versions prior to v2.33
HP Integrated Lights-Out 4 (iLO 4) firmware versions prior to v2.77

QID Detection Logic(Unauthenticated):
This QID checks for vulnerable version of HPE Integrated Lights-Out via an HTTP request to "xmldata?item=All" URL.

Customers are advised to visit HPSBHF03275 to remediate this vulnerability.

Affected Product:
Oracle Linux 8

Affected Product:
Oracle Linux 8

Security Fix(es): kernel: Use after free via PI futex state (CVE-2021-3347) kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: powerpc: guest can cause DoS on POWER9 KVM hosts (CVE-2020-11669)

Affected Products:

Red Hat Enterprise Linux for Power 9 7 ppc64le
Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1379 to address this issue and obtain more information.

Vulnerable Component: BIG-IP ASM, APM,LTM

Affected Versions:
15.0.0 - 15.1.0
14.0.0 - 14.1.2
13.1.0 - 13.1.3
12.1.0 - 12.1.5
11.5.2 - 11.6.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

Workaround:
To mitigate this vulnerability, you can remove the OneConnect profile from the affected virtual server.

No further bug fixes, enhancements, security updates or technical support is available for this version.
Affected Versions and EOL:
PowerShell Version 6.0 : February 13,2019
PowerShell Version 6.1 : September 28,2019
PowerShell Version 6.2 : September 4,2020

QID Detection Logic:
Operating System: Windows
The QID checks for vulnerable version of file pwsh,exe
Operating System: Linux
The QID checks for vulnerable version of PowerShell Core by running command "pwsh --version" .

Vulnerable Component: BIG-IP DNS, GTM

Affected Versions:
15.0.0 - 15.1.0
14.1.0 - 14.1.2
13.1.0 - 13.1.3
12.1.0 - 12.1.5
11.6.1 - 11.6.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

Affected Versions:
Apple MacOS Big Sur version before 11.2.3

QID Detection Logic:
This QID checks for vulnerable version of Big sur.

For more information regarding the update can be found at HT212220.

Vulnerable Component: BIG-IP APM

Affected Versions:
16.0.0 - 16.0.1
15.0.0 - 15.1.2
14.1.0 - 14.1.3
13.1.0 - 13.1.3
12.1.0 - 12.1.5
11.5.2 - 11.6.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

Workaround:
To mitigate this vulnerability, you can configure multi-factor authentication (MFA), or host-level authentication, such as deploying an IPSec tunnel between the affected BIG-IP APM system and the AD servers.

Affected OS: EulerOS V2.0SP5

QID Detection Logic (Authenticated):
This QID checks "show version" command for catalyst version and posts if End Of Life version is found.

Security Fix(es): XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet (CVE-2021-21344) XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry (CVE-2021-21345) XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue (CVE-2021-21346) XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator (CVE-2021-21347) XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader (CVE-2021-21350)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Scientific Computing 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1354 to address this issue and obtain more information.

Affected OS: EulerOS V2.0SP5

Affected OS: EulerOS V2.0SP5

Affected OS: EulerOS V2.0SP5

Security Fix(es): kernel: SCSI target (LIO)
write to any block on ILO backstore (CVE-2020-28374) kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) kernel: use-after-free in fs/block_dev.c (CVE-2020-15436) kernel: iscsi: unrestricted access to sessions and handles (CVE-2021-27363)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
Red Hat Enterprise Linux Server - AUS 7.6 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
Red Hat Enterprise Linux Server - TUS 7.6 x86_64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.6 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6 x86_64
Red Hat Virtualization Host - Extended Update Support 4.2 for RHEL 7.6 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1376 to address this issue and obtain more information.

Security Fix(es): kernel: SCSI target (LIO)
write to any block on ILO backstore (CVE-2020-28374) kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
Red Hat Enterprise Linux Server - AUS 7.6 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
Red Hat Enterprise Linux Server - TUS 7.6 x86_64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.6 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1377 to address this issue and obtain more information.

Affected OS: EulerOS V2.0SP5

Affected Versions:
Jenkins weekly up to and including 2.285
Jenkins LTS up to and including 2.277.2

Fixed Versions:
Jenkins weekly should be updated to version 2.286
Jenkins LTS should be updated to version 2.277.3

QID Detection Logic(Unauthenticated):
This QID checks for vulnerable version by sending a crafted GET request to Jenkins. This QID also detects the vulnerable version from login page or HTTP header.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946) Mozilla: Race condition when reading from disk while verifying signatures (CVE-2021-29948)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1350 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946) Mozilla: Race condition when reading from disk while verifying signatures (CVE-2021-29948)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1351 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946) Mozilla: Race condition when reading from disk while verifying signatures (CVE-2021-29948)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.2 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1352 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946) Mozilla: Race condition when reading from disk while verifying signatures (CVE-2021-29948)

Affected Products:

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1353 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Affected Products:

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1360 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.2 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1361 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Affected Products:

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1362 to address this issue and obtain more information.

Security Fix(es): Mozilla: Out of bound write due to lazy initialization (CVE-2021-23994) Mozilla: Use-after-free in Responsive Design Mode (CVE-2021-23995) Mozilla: More internal network hosts could have been probed by a malicious webpage (CVE-2021-23961) Mozilla: Secure Lock icon could have been spoofed (CVE-2021-23998) Mozilla: Blob URLs may have been granted additional privileges (CVE-2021-23999) Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL (CVE-2021-24002) Mozilla: Incorrect size computation in WebAssembly JIT could lead to null-reads (CVE-2021-29945) Mozilla: Port blocking could be bypassed (CVE-2021-29946)

Affected Products:

Red Hat Enterprise Linux Server 7 x86_64
Red Hat Enterprise Linux Workstation 7 x86_64
Red Hat Enterprise Linux Desktop 7 x86_64
Red Hat Enterprise Linux for IBM z Systems 7 s390x
Red Hat Enterprise Linux for Power, big endian 7 ppc64
Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Refer to Red Hat security advisory RHSA-2021:1363 to address this issue and obtain more information.

Affected OS: EulerOS V2.0SP5

Affected Product:
Oracle Linux 7

Affected Versions:
Drupal 9.1, prior to Drupal 9.1.7.
Drupal 9.0, prior to Drupal 9.0.12.
Drupal 8.9, prior to Drupal 8.9.14.
Drupal 7, prior to Drupal 7.80.

QID Detection Logic:(Unauthenticated)
This QID checks for vulnerable version of Drupal installed on the target.

Note: Versions of Drupal 8 prior to 8.9.x are end-of-life and do not receive security coverage.

Affected Versions:
Apache Solr versions 8.0.0 to 8.8.1
Apache Solr versions 7.0.0 to 7.7.3

QID Detection Logic (Unauthenticated):
This QID sends a crafted HTTP request to check if the target is vulnerable or not.

Multiple vulnerabilities have been found in Salt, the worst of which could allow remote attacker to execute arbitrary commands.

Affected Package: app-admin/salt

Affected version: Prior to 3000.8

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Affected Versions:
Google Chrome Prior to 90.0.4430.72

QID Detection Logic(Authenticated):
This QID checks for vulnerable versions of Google Chrome on Windows, MAC OS, and Linux OS.

Affected versions:
Apple macOS Security Update Prior to 2021-003 Mojave.

QID Detection Logic (Authenticated):
This QID looks for the missing security patches from Mojave

For more information regarding the update can be found at HT212327.

Microsoft Edge based on Chromium is affected by the following vulnerabilities:
CVE-2021-21222: Heap buffer overflow in V8.
CVE-2021-21223: Integer overflow in Mojo.
CVE-2021-21225: Out of bounds memory access in V8.
CVE-2021-21226: Use after free in navigation.

QID Detection Logic: (authenticated)
Operating System: Windows
The install path is checked via registry "HKLM\SOFTWARE\Clients\StartMenuInternet\Microsoft Edge\shell\open\command". The version is checked via file msedge.exe.

Affected versions:
Apple macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.

QID Detection Logic (Authenticated):
This QID looks for the missing security patches from Mojave, Big Sur, Catalina