11119 matches found
Design/Logic Flaw
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...
CVE-2020-11161
Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...
Unauthorized Access Vulnerability in WV-SPW611L at Panasonic (China) Co.
Panasonic China Co., Ltd. was established in 1994 and is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW611L, which can be...
JBoss Core Services Memory Use-After-Free
The vulnerability of the component set used to build JBoss Core Services applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
Unauthorized Access Vulnerability in WV-SW355 at Panasonic (China) Co.
Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in WV-SW355 of Panasonic China Co. An attack...
Intel Processors Information Leakage Vulnerability
Intel Processors is an American Intel company that provides the ability to interpret computer instructions and process data in computer software. An information disclosure vulnerability exists in Intel Processors, which arises from errors such as configuration during operation of a networked syst...
PT-2021-14607
Name of the Vulnerable Software and Affected Versions Dell EMC NetWorker versions 18.x through 19.4.0.1 Description The issue is related to an Improper Certificate Validation vulnerability in the client components of Dell EMC NetWorker, which uses SSL encrypted connections to communicate with the...
Microsoft Windows Print Spooler Components Security Vulnerabilities
Windows Print Spooler is a printer background handler for Windows. An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler. An attacker can exploit this vulnerability to elevate privileges...
@tiendanube/components (>=0.0.2, <=2.4.2), @tiendanube/icons (>=0.1.1, <=0.2.8) +2 more potentially affected by CVE-2021-33623 via trim-newlines (3.0.0)
trim-newlines NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on trim-newlines and may be impacted: - @tiendanube/components =0.0.2, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2021-33623 Source advisory: GHSA-7P7H-4MM5-852V...
@tiendanube/components (>=0.0.2, <=2.4.2), @tiendanube/icons (>=0.1.1, <=0.2.8) +2 more potentially affected by CVE-2021-33623 via trim-newlines (3.0.0)
trim-newlines NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on trim-newlines and may be impacted: - @tiendanube/components =0.0.2, =0.1.1, =1.0.1, =1.0.2 Source cves: CVE-2021-33623 Source advisory: OSV:GHSA-7P7H-4MM5-852V...
CVE-2021-31249
A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components...
Multiple Chiyu products have been found to have vulnerabilities
The Chiyu CHIYU BF-430, etc. are all networking servers that provide communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu Inc. of Taiwan, China. A security vulnerability exists in CHIYU Technology Inc's BF-430, BF-431, and BF-450M TCP/IP...
OPENSUSE-SU-2021:0829-1 Security update for opera
This update for opera fixes the following issues: Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: “Use old password” button doesn’t work -...
CHIYU TCP/IP Converter devices - CRLF injection
Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Date: May 31 2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter device...
CHIYU TCP/IP Converter CRLF Injection
Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Date: May 31 2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter device...
CHIYU TCP/IP Converter devices - CRLF injection Vulnerability
Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter devices - all firmware...
OESA-2021-1199 mysql security update
Security Fixes: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server’s Web Part components is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...
cf-nlp (>=0.1.0, <=0.1.1), dlgo (0.2.0) +2 more potentially affected by CVE-2021-29562 via tensorflow (1.10.1)
tensorflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cf-nlp =0.1.0, =0.6.0, =0.6.1 Source cves: CVE-2021-29562 Source advisory: OSV:GHSA-36VM-XW34-X4PJ...