UVI-2021-1001859 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

GSD-2021-1001848 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit 28f28e4bc3a5e0051faa963f10b778ab38c1db69...

UVI-2021-1001848 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit 28f28e4bc3a5e0051faa963f10b778ab38c1db69...

UVI-2021-1001823 dma-debug: fix sg checks in debug_dma_map_sg()

dma-debug: fix sg checks in debugdmamapsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

UVI-2021-1001822 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit 1248582e47a9f7ce0ecd156c39fc61f8b6aa3699...

UVI-2021-1001819 powerpc/idle: Don't corrupt back chain when going idle

powerpc/idle: Don't corrupt back chain when going idle This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.156 by commit...

GSD-2021-1001806 drm/msm: Fix null pointer dereference on pointer edp

drm/msm: Fix null pointer dereference on pointer edp This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.213 by commit...

UVI-2021-1001803 can: peak_pci: peak_pci_remove(): fix UAF

can: peakpci: peakpciremove: fix UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.214 by commit adbda14730aacce41c0d3596415aa39ad63eafd...

GSD-2021-1001786 efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()

efi: Change downinterruptible in virtefiresetsystem to downtrylock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.288 by commit...

Automation Enables Innovation in the Cloud

As public cloud adoption continues to grow year after year, we see more and more enterprises realizing the strategic advantage the cloud can provide to help deliver new and innovative products quicker, roll out new features with ease, and reach new customers. But along with those advantages comes...

CVE-2021-31682

The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to...

CVE-2021-31682

The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to...

CVE-2021-31682

The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to...

CVE-2021-31682

The CVE-2021-31682 entry covers a reflected XSS in Automated Logic WebCTRL/WebCTRL OEM (WebCTRL OEM

Product Overview: Cynet SaaS Security Posture Management (SSPM)

Software-as-a-service SaaS applications have gone from novelty to business necessity in a few short years, and its positive impact on organizations is clear. It's safe to say that most industries today run on SaaS applications, which is undoubtedly positive, but it does introduce some critical ne...

AUVESY Versiondog has an unspecified vulnerability (CNVD-2021-82927)

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog that could be exploited by an attacker to cause the manipulation and/or deletion of files...

AUVESY Versiondog has an unspecified vulnerability

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog, which could be exploited by attackers to gain SYSDBA privileges...

AUVESY Versiondog has an unspecified vulnerability (CNVD-2021-82935)

AUVESY Versiondog is an automated production data and change management software solution from AUVESY Germany. a security vulnerability exists in AUVESY Versiondog that could be exploited by an attacker to rewrite memory anywhere in the affected product...

AUVESY Versiondog Out-of-Bounds Reading Vulnerability

An out-of-bounds read vulnerability exists in AUVESY Versiondog, an automated production data and change management software solution from AUVESY Germany, which can be exploited by attackers to specify any offset and read out-of-bounds data...

AUVESY Versiondog has an unspecified vulnerability (CNVD-2021-82939)

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. A security vulnerability exists in AUVESY Versiondog that could be exploited by attackers to extract keys from binaries...