46 matches found
CVE-2021-27823
An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...
CVE-2016-8181
CVE-2016-8181 is rejected/not used and does not represent an active vulnerability entry.
Design/Logic Flaw
TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the "It is only available on the local network" documentation. NOTE: manually editing /etc/upnp.json provides a partial but...
CVE-2021-30127
CVE-2021-30127 affects TerraMaster F2-210 devices. The root issue is UPnP-enabled exposure of the admin web server on TCP port 8181 to the Internet, contrary to local-network expectations. Consequence is potential unauthorized access due to outward-facing admin interface. A partial, undocumented ...
Terramaster TerraMaster FS-210 安全漏洞
The Terramaster TerraMaster FS-210 is a NAS Network Attached Storage device from Tumi Electronic Technology Terramaster of Shenzhen, China. A security vulnerability exists in the TerraMaster F2-210 devices that originates from allowing access to the device over the Internet on TCP port 8181...
EulerOS Virtualization 3.0.2.6 : kernel (EulerOS-SA-2021-1056)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while...
CVE-2020-8181
A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars...
CVE-2020-8181
CVE-2020-8181 affects Nextcloud Contacts 3.2.0. A missing file type check in the avatar upload feature allows uploading arbitrary files, as confirmed by multiple sources (Nextcloud advisory NC-SA-2020-024; Red Hat/CVE mapping; CNVD/NVD entries; HackerOne report). Consequences include potential up...
CVE-2014-8181
The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...
CVE-2014-8181
The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SGIO buffer, which may leaking sensitive information to userspace...
CVE-2014-8181
CVE-2014-8181 affects the Linux kernel in Red Hat Enterprise Linux 7 and MRG-2, where SG_IO buffer garbage data is not cleared, potentially leaking sensitive information to userspace. The core issue is the kernel not clearing garbage data in SG_IO buffers, enabling partial information disclosure ...
CVE-2019-8181
Adobe Acrobat and Reader are affected by a use-after-free vulnerability (CVE-2019-8181) in multiple older builds (e.g., 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier). Successful exploitation could lead to arbitrary code execution. The issue is documented unde...
Adobe Acrobat 2017 Security Updates (APSB19-49) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Reader < 2015.006.30504 / 2017.011.30150 / 2019.021.20047 Multiple Vulnerabilities (APSB19-49) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30504, 2017.011.30150, or 2019.021.20047. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier,...
KLA11583 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader
Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability can be exploited to execute...
CVE-2017-8181
The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and...
CVE-2017-8181
CVE-2017-8181 affects Huawei smartphones with MTK-based camera driver prior to Nice-AL00C00B155. The vulnerability stems from insufficient input verification in the MTK camera driver, enabling an attacker to trick a user into installing a malicious app with elevated privileges and send a specific...