CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

Denial of service

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

CVE-2021-36310: Protection Mechanism Failure

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

VMware vCenter Server Resource Management Vulnerability

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. vmware vCenter Server suffers fr...

PT-2021-14643

Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions 19.4 or older Description The issue is related to an uncontrolled resource consumption flaw in the API service of Dell EMC NetWorker. This could be exploited by an authorized API user via the web and desktop user...

CVE-2021-21600: Missing Release of Resource after Effective Lifetime

Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path...

Exploit for Path Traversal in Wazuh

CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...

CVE-2021-3146

The CVE-2021-3146 issue affects Dolby Audio X2 (DAX2) API service on Windows, where versions prior to 0.8.8.90 allow local users to gain privileges due to a code issue in the API service. Affected component: Dolby DAX2 API service; root cause described as a code issue in DAX2 prior to 0.8.8.90. I...

Authentication flaw

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...

CVE-2020-1688

Technical details (affected products/versions/impact/fix) are not publicly available in the provided connected documents. Monitor for updates.

PT-2020-5509

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 12.3X48-D105 Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 15.1X49-D190 Juniper Networks Junos OS on SRX Series and NFX Series versions prior t...

PT-2020-21168

Name of the Vulnerable Software and Affected Versions soletta-dev-app versions affected versions not specified Description The issue concerns a lack of validation for user input on the "/api/service/status" API endpoint. Specifically, the contents of the service query parameter are passed to an...

CVE-2019-7589: Improper Input Validation

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and...

PT-2020-11247

Name of the Vulnerable Software and Affected Versions Kantech EntraPass Corporate Edition versions 8.0 and prior Kantech EntraPass Global Edition versions 8.0 and prior Description A vulnerability exists in the SmartService API Service option, allowing an unauthorized user to potentially upload...