Garrett Metal Detectors iC Module CMA check_udp_crc memcpy stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this...

Garrett Metal Detectors iC Module CMA CLI setenv command directory traversal vulnerability

Summary A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to arbitrary file overwrite. An attacker can provide malicious input to trigger this vulnerability. Tested...

GHSA-HWVM-VFW8-93MW Vulnerable dependency in XTDB connector

Impact The impacted portion of the XTDB connector is its connectivity to S3 as a backing store: this is the only portion of the connector that uses this vulnerable httpclient dependency. Per the description, the vulnerability regards URIs that may be misinterpreted, which given the area of impact...

Vulnerable dependency in XTDB connector

Impact The impacted portion of the XTDB connector is its connectivity to S3 as a backing store: this is the only portion of the connector that uses this vulnerable httpclient dependency. Per the description, the vulnerability regards URIs that may be misinterpreted, which given the area of impact...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0997

In handleUpdateNetworkState of GnssNetworkConnectivityHandler.java , there is a possible APN disclosure due to log information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0994

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...

CVE-2021-0994

In requestRouteToHostAddress of ConnectivityService.java, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interactio...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

CVE-2021-42293 Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

...

CVE-2021-42293

The CVE-2021-42293 entry concerns a elevation of privilege flaw in Microsoft's Jet Red Database Engine and Access Connectivity Engine. Connected sources confirm affected components are the Jet Red database engine and the Access connectivity engine used by Office products (notably Office 2013/2016...

Microsoft Office 2016 Privilege Escalation Vulnerability (KB5002099)

This host is missing an important security update according to Microsoft KB5002099 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2013 Elevation of Privilege Vulnerability (KB5002104)

This host is missing an important security update according to Microsoft KB5002104 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2021-42293: Undefined Security Weakness

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability...

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

...

Microsoft Jet Red Database Engine 和 Access Connectivity Engine 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. A vulnerability exists in Microsoft Jet Red Database Engine and Access Connectivity Engine with privilege license and access control issues. No information about this vulnerability is available at this time, please stay...

PT-2021-6179

Name of the Vulnerable Software and Affected Versions Microsoft Jet Red Database Engine and Access Connectivity Engine affected versions not specified Description The issue is related to insecure privilege management in the Microsoft Jet Red Database Engine and Access Connectivity Engine of...