Design/Logic Flaw

An access issue was addressed with additional sandbox restrictions on third party applications. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access some of the user's Apple ID information, or recent in-app search terms...

CVE-2021-31001

According to the sources, CVE-2021-31001 is an access issue in iOS/iPadOS Telephony that could allow an attacker in a privileged network position to leak sensitive user information. The vulnerability is addressed in iOS 15 and iPadOS 15. Connected documents (Red Hat, PT Security, CNNVD, etc.) con...

CVE-2021-30987

CVE-2021-30987 describes an access-control issue in macOS Monterey 12.1 where a device may be passively tracked via BSSIDs. The vulnerability is disclosed in Apple advisory HT212978 and reflected in multiple sources (NVD entry and related vendor advisories). Affected product: macOS Monterey prior...

CVE-2021-30947

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files...

CVE-2021-30947

CVE-2021-30947 affects Apple platforms (macOS Big Sur, Monterey; iOS/iPadOS 15.2; tvOS 15.2; watchOS 8.3). Root cause: an access issue addressed by implementing additional sandbox restrictions, potentially allowing an application to access a user’s files. Fixes are in macOS Big Sur 11.6.2, macOS ...

CVE-2021-30898

CVE-2021-30898 (Apple iOS/iPadOS 15) describes an access issue fixed by additional sandbox restrictions on third‑party applications. A malicious app could access some of the user’s Apple ID information or recent in‑app search terms. Affects devices running iOS/iPadOS up to pre‑15, with the fix im...

CVE-2021-30898

An access issue was addressed with additional sandbox restrictions on third party applications. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access some of the user's Apple ID information, or recent in-app search terms...

Citrix App Layering | Unable to access the packaging VM in Azure portal while adding a version to OS Layer imported from Citrix Hypervisor/VMware base ELM

Issue while adding version to OS Layer, wherein the packaging vm of the OS Layer revision does not allow the Citrix Admin to RDP or ping to it. Cannot RDP nor Ping to this packaging vm and on the boot diagnostics in Azure, we see a black screen...

GitLab: Improper access control for users with expired password, giving the user full access through API and Git

Summary Users with an "expired password" can still access the full API with tokens. This includes the REST API, GraphQL API and Git HTTP access. The same issue was mitigated in 13.12.2 as "Insufficient Expired Password Validation". That patch blocked users with expired passwords from accessing th...

CVE-2020-26180

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

Design/Logic Flaw

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

CVE-2020-26180

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

CVE-2020-26180

CVE-2020-26180 affects Dell EMC Isilon OneFS (8.1+), and Dell EMC PowerScale OneFS (9.0.0). The root cause is an access issue tied to the remotesupport user account, allowing a remote, low-privilege attacker to access data under the /ifs directory via most protocols. The documents do not provide ...

CVE-2021-20478

IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497...

Unspecified Vulnerability in Red Hat Enterprise Linux

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat. A security vulnerability exists in Red Hat Enterprise Linux. The vulnerability stems from an incorrectly formatted input file may cause a segment error due to an out-of-range array access in...

June 8, 2021—KB5003661 (Monthly Rollup)

None None...

CVAD 1912 CU2 || Unable launch applications / Desktop from client - Unknown client error 1110, Proxy error

User can access to Published app locally. .User cannot access published apps or desktop through VPN from client machine.Ping and access Domain server, local DNS, etc working fine...

IBM Security Guardium Access Control Error Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from an Access Control Error vulnerabili...

CVE-2021-20221

CVE-2021-20221 affects QEMU’s ARM Generic Interrupt Controller emulator up to version 4.2.0 on AArch64. The vulnerability is an out-of-bounds heap buffer access when writing an interrupt ID to controller memory, where the interrupt ID is not masked to 4 bits, potentially corrupting controller sta...

CVE-2021-25811

MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listenhttplan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listenhttplan parameter to uhttpd.json is manual...