CVE-2021-22793

CVE-2021-22793 affects Schneider Electric AccuSine PCS+ / PFV+ (before v1.6.7) and AccuSine PCSn (before v2.2.4). The issue is CWE-200: Exposure of Sensitive Information to an Unauthorized Actor. An authenticated attacker could access the device via FTP, exposing sensitive information. Connected ...

Exploit for Observable Discrepancy in Servicenow

CVE-2021-45901 ServiceNow - Username Enumeration !service-...

[SECURITY] Fedora 34 Update: kernel-5.13.10-200.fc34

The kernel meta package...

Intel Optane Pmem 输入验证错误漏洞

Intel Optane Pmem is a memory device from Intel Corporation USA. An input validation error vulnerability exists in the Intel Optane Pmem device that stems from the product's lack of valid input validation. An attacker could use this vulnerability to cause a denial of service. The following produc...

[SECURITY] Fedora 34 Update: kernel-5.13.8-200.fc34

The kernel meta package...

CVE-2021-34849

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

[SECURITY] Fedora 34 Update: kernel-5.13.6-200.fc34

The kernel meta package...

CVE-2021-22770

A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information...

Information disclosure

A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information...

Information disclosure

A CWE-200: Information Exposure vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could cause disclosure of encrypte...

CVE-2021-22728

A CWE-200: Information Exposure vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could cause disclosure of encrypte...

CVE-2021-22728

The CVE-2021-22728 entry concerns a CWE-200 information exposure vulnerability in Schneider Electric EVlink devices: EVlink City (EVC1S22P4 / EVC1S7P4), EVlink Parking (EVW2 / EVF2 / EV.2), and EVlink Smart Wallbox (EVB1A) with all versions prior to R8 V3.4.0.1. The flaw could disclose encrypted ...

CVE-2021-22721

CVE-2021-22721 affects Schneider Electric EVlink City (EVC1S22P4 / EVC1S7P4), EVlink Parking (EVW2 / EVF2 / EV.2), and EVlink Smart Wallbox (EVB1A) with all versions prior to R8 V3.4.0.1. The vulnerability is an information-disclosure issue caused by crafted parameters submitted to the charging s...

CVE-2021-22770

The CVE-2021-22770 entry concerns Schneider Electric’s Easergy T300 remote terminal unit. Affected firmware: v2.7.1 and older. Root cause: information exposure due to inadequate data access checks, allowing an actor not explicitly authorized to access sensitive information. Documented impact: dat...

CVE-2021-22770

A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to an actor not explicitly authorized to have access to that information...

Eclipse Jetty Information Disclosure Vulnerability (GHSA-vjv5-gp2w-65vm) - Linux

Eclipse Jetty is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"...

Tesla “Recalls” Vehicles in China due to Safety Glitch

The recall affects over 200,000 Models 3 and Y vehicles...

[SECURITY] Fedora 33 Update: kernel-5.12.14-200.fc33

The kernel meta package...

Backdoor.Win32.ReverseTrojan.200 Authentication Bypass

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3fbec7c0623f5f80e4d9c096a50b0d59.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.ReverseTrojan.200 Vulnerability: Authentication Bypass Empty Password Description:...

Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)

Exploit Title: Responsive Tourism Website 3.1 - Remote Code Execution RCE Unauthenticated Date: 22.06.2021 Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14838/simple-responsive-tourism-website-using-php-free-source-code.html Version: V 3.1 Tested on: MacOS &...