Input validation

Improper input validation in firmware for some IntelR PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2021-0053

Improper initialization in firmware for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2021-0053

CVE-2021-0053 affects Intel® PROSet/Wireless WiFi and Killer™ WiFi on Windows 10 due to an "improper initialization" in firmware. The Red Hat and Intel advisories confirm that this may allow an authenticated user to disclose information via adjacent access. The vulnerability’s root cause is in fi...

CVE-2021-0079

Improper input validation in software for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0078

Improper input validation in software for some IntelR PROSet/Wireless WiFi and KillerTM WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

Intel PROSet Wireless 安全漏洞

Intel PROSet Wireless is a driver for the Intel PROSet Wireless card from Intel Corporation USA. A security vulnerability exists in Intel PROSet Wireless WiFi and KillerTM WiFi, where authenticated users can potentially enable information disclosure through adjacent access...

Intel PROSet Wireless 输入验证错误漏洞

Intel PROSet Wireless is a driver for Intel PROSet wireless network cards from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet Wireless, where an unauthenticated user could enable denial of service via adjacent access...

Intel PROSet Wireless 输入验证错误漏洞

Intel PROSet Wireless is a driver for Intel PROSet wireless network cards from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet Wireless, where an unauthenticated user could enable denial of service via adjacent access...

kernel: Improper access control in BlueZ may allow information disclosure vulnerability.

A flaw was found in the Linux kernel. Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. The highest threat from this vulnerability is to data confidentiality and integrity...

kernel: Improper access control in BlueZ may allow information disclosure vulnerability.

A flaw was found in the Linux kernel. Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. The highest threat from this vulnerability is to data confidentiality and integrity...

NETGEAR R7000 SOAP ParentalControl Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP requests. The issue results from the lack of prope...

NewStart CGSL CORE 5.04 / MAIN 5.04 : linux-firmware Vulnerability (NS-SA-2021-0099)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has linux-firmware packages installed that are affected by a vulnerability: - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable...

NewStart CGSL CORE 5.05 / MAIN 5.05 : linux-firmware Vulnerability (NS-SA-2021-0185)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has linux-firmware packages installed that are affected by a vulnerability: - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable...

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

PT-2021-6150 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: The issue results from the lack of proper access control within the httpd service, which listens on TCP port 80 by default. This allows network-adjacent attackers to...

CVE-2021-31365

An Uncontrolled Resource Consumption vulnerability in Juniper Networks Junos OS on EX2300, EX3400 and EX4300 Series platforms allows an adjacent attacker sending a stream of layer 2 frames will trigger an Aggregated Ethernet AE interface to go down and thereby causing a Denial of Service DoS. By...