Buffer overflow

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

CVE-2021-22275

CVE-2021-22275 describes a Buffer Overflow in the B&R Automation Runtime webserver that can be triggered by an unauthenticated, network-based attacker to stop the device’s cyclic program and cause a denial of service. Documents associated with this CVE indicate the vulnerability arises from impro...

Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

PT-2022-9232

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime affected versions not specified Description A Buffer Overflow issue in the B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device, causing a denial of...

B&R Automation Runtime 安全漏洞

B&R Automation Runtime is a major component of AS from B&R Automation, an Austrian company. A security vulnerability exists in B&R Automation Runtime versions prior to 4.91 that stems from improper buffer limits in the web server. Exploitation of the vulnerability by an unauthenticated attacker...

CVE-2021-22275: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

CVE-2022-21151

Processor optimization removal or modification of security-critical code for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Google Chrome 78.0.3904.70 - Remote Code Execution Exploit

Exploit Title: Google Chrome 78.0.3904.70 - Remote Code Execution Exploit Author: deadlock Forrest Orr Type: RCE Platform: Windows Website: https://forrest-orr.net Twitter: https://twitter.com/ForrestOrr Vendor Homepage: https://www.google.com/chrome/ Software Link:...

CVE-2021-33083: Improper Authentication

Improper authentication in firmware for some IntelR SSD, IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow an privileged user to potentially enable information disclosure via local access...

CVE-2021-33069: Improper Resource Shutdown or Release

Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-33080: Improper Removal of Sensitive Information Before Storage or Transfer

Exposure of sensitive system information due to uncleared debug information in firmware for some IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access...

CVE-2021-0126: Improper Input Validation

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-24297: Undefined Security Weakness

Improper buffer restrictions in firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21128: Undefined Security Weakness

Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0194: Undefined Security Weakness

Improper access control in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2021-33108: Improper Input Validation

Improper input validation in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0193: Improper Authentication

Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-21136: Improper Input Validation

Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-0188: Improper Restriction of Operations within the Bounds of a Memory Buffer

Return of pointer value outside of expected range in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

CVE-2021-0155: Unchecked Return Value

Unchecked return value in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...