CVE-2024-21791

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...

CVE-2024-21791 SQL Injection in ADAudit Plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...

CVE-2024-21791

CVE-2024-21791 affects Zoho ManageEngine ADAudit Plus versions below 7271, where a SQL injection in the Lock History option is possible. Root cause: input handling in the lockout history path enables SQL injection. Impact stated in sources includes high confidentiality, integrity, and availabilit...

CVE-2024-21791 SQL Injection in ADAudit Plus

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability...

CVE-2023-21791

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:57+00:00| seen| https://t.me/cibsecurity/56281...

CVE-2023-21791

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21791

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21791 3D Builder Remote Code Execution Vulnerability

...

KLA20156 Multiple vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-21792 CVE-2023-21785 CVE-2023-21791 CVE-2023-21782 CVE-2023-21786 CVE-2023-21788 CVE-2023-21789 CVE-2023-21790 CVE-2023-217...

CVE-2023-21791

CVE-2023-21791 relates to the Microsoft 3D Builder app and is described in connected sources as a remote code execution vulnerability caused by insufficient input validation in the 3D Builder program. Exploitation is reported via opening a specially crafted file, enabling arbitrary code execution...

CVE-2022-21791

creationtimestamp| type| source ---|---|--- 2022-08-01 18:17:03+00:00| seen| https://t.me/cibsecurity/47338...

CVE-2022-21791

CVE-2022-21791 affects MediaTek camera ISP components, causing an out-of-bounds read due to a missing bounds check. This could enable local information disclosure with SYSTEM execution privileges needed and requires no user interaction. Patch ALPS06478059 (Issue ALPS06478059) has been issued; aff...

CVE-2021-21791

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21791

CVE-2021-21791 is an information-disclosure vulnerability in the IOBit Advanced SystemCare Ultimate 14.2.0.220 driver. TALOS details show that a local attacker can trigger privileged I/O reads via exposed IOCTL paths to the driver (notably 0x9C4060D0 for reading a word via IN). The vulnerability ...

IOBit Advanced SystemCare Ultimate Privileged I/O Read vulnerabilities

Summary An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive...