PT-2021-2077

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the implementation of PFX encryption technology in Microsoft Windows, specifically concerning the lack of protection for service data. This could allow an...

PT-2021-2054 · Microsoft · Windows Trust Verification Api +1

Name of the Vulnerable Software and Affected Versions: Windows Trust Verification API affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Trust Verification API, which is caused by resource release errors. This vulnerability can be...

Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access SMA 100 series devices. The flaw, which affects both physical and virtual SMA 100 10.x devices SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v, came to light after the NCC Group on...

Command Injection Vulnerability in Multiple Cisco Products

Cisco SD-WAN vManage Software and others are products of Cisco. cisco SD-WAN vManage Software is a management software for SD-WAN software-defined wide-area network solutions. cisco SD-WAN vEdge Routers is a software for authentication between Cisco vSmart Controllers and vEdge routers...

Juniper Networks Junos OS Configuration Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A misconfiguration vulnerability exists in Junos OS that can be exploited by an attacker to trigger a denial of service vi...

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware that originates from a buffer over-read that occurs if the length of the IE is less than the length of the accessed frame pointer when processing a...

Qualcomm Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which results in memory corruption due to a lack of checking the validation of buffer pointers passed to trustzone. The following products and versions...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from an information disclosure issue caused by not validating pointer parameters passed to the TZ BSP. The following products and...

CVE-2020-35796

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5.0.10, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2 before 1.0.0.62, D8500 before 1.0.3.50, DC112A before 1.0.0.48, DGN2200v4 before 1.0.0.114, EAX20 before 1.0.0.36,...

Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, XR500 before 2.3.2.56,...

Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK20 before 2.3.5.26,...

Multiple Amino Product Trust Management Issue Vulnerabilities

Amino Communications AK45x series, among others, is a line of TV set-top box devices from Amino UK. A security vulnerability exists in a number of Amino Communications products that originates from a root user hard-coded SSH key, which can be exploited by an attacker to remotely login via SSH. Th...

PT-2020-16636 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

Authorization

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...

Siemens LOGO! 8 BM Information Disclosure Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. Siemens LOGO! 8 BM is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to make unauthorized password or configuration changes to any...

Apple IO Model Security Vulnerability

Apple IO Model is an Apple module for handling IO operations. A security vulnerability exists in Apple IO Model, which originates from the handling of maliciously crafted USD files that could result in unexpected application termination or arbitrary code execution. The following products and...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

CVE-2020-9111

E6878-370 versions 10.0.3.1H557SP27C233,10.0.3.1H563SP21C233 and E6878-870 versions 10.0.3.1H557SP27C233,10.0.3.1H563SP11C233 have a denial of service vulnerability. The system does not properly check some events, an attacker could launch the events continually, successful exploit could cause...

Grocy Cross-Site Scripting Vulnerability

Grocy is a web-based self-hosted grocery and home management solution for families by individual developers. The platform is an ERP system for families written in PHP. A cross-site scripting vulnerability exists in Grocy version 2.7.1 and prior versions. The vulnerability is related to a running...

PT-2020-13626 · Espressif · Esp32

Name of the Vulnerable Software and Affected Versions: ESP32 affected versions not specified Description: The issue concerns bypassing Secure Boot and Flash Encryption on ESP32 chips. It allows extracting decrypted flash data from a fully protected ESP32 chip using chip-level weaknesses, without...