PT-2021-5986

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.10.0 and below Adobe Experience Manager's Cloud Service offering Description The issue is related to insufficient input validation, which could allow a remote attacker to bypass security controls. Sensitiv...

PT-2021-7947 · Microsoft +1 · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core and Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the software development tool Microsoft Visual Studio, which is associated with insufficient access...

Fortinet FortiClient for Windows License Error Vulnerability

Fortinet FortiClient is a fabric agent from Fortinet USA, Inc. It is used to provide protection, compliance and secure access in a single modular lightweight client.Fortinet FortiClient for Windows 7.0.0, versions 6.4.6 and earlier and 6.2.8 and earlier are vulnerable to an authorization error. A...

SaltStack Salt Unauthorized Access

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to improper access restrictions. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to other restricted functions...

CISA Releases Security Advisory for Hillrom Welch Allyn Cardiology Products

CISA has released an Industrial Controls Systems Medical Advisory ICSMA detailing a vulnerability in multiple Hillrom Welch Allyn cardiology products. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages technicians and administrators to review...

Best practices for AI security risk management

Today, we are releasing an AI security risk assessment framework as a step to empower organizations to reliably audit, track, and improve the security of the AI systems. In addition, we are providing new updates to Counterfit, our open-source tool to simplify assessing the security posture of AI...

Hillrom Welch Allyn Cardio Products

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Hillrom Equipment: Welch Allyn Cardio Products Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access...

Hitachi Energy GMS600, PWC600, and Relion

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: GMS600, PWC600, and Relion 670/650/SAM600-IO Vulnerability: Improper Access Controls 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

DEBIAN-CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

CVE-2021-37091

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected...

CVE-2021-37091

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected...

CVE-2021-37058

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

CVE-2021-37058

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

USN-5178-1: Django vulnerability

Sjoerd Job Postmus and TengMA discovered that Django incorrectly handled URLs with trailing newlines. A remote attacker could possibly use this issue to bypass certain access controls...

CVE-2021-37091: Undefined Security Weakness

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected...

Johnson Controls exacqVision Server Information Disclosure Vulnerability

Johnson Controls exacqVision Server is a surveillance video management software from Johnson Controls, a U.S. company. Johnson Controls is vulnerable to an information disclosure vulnerability that stems from excessive data output from the application. An attacker could use this vulnerability to...

PT-2021-21511

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to Permissions, Privileges, and Access Controls. Successful exploitation may lead to confidentiality being affected. Recommendations At the moment, there is no...

CVE-2021-37058: Undefined Security Weakness

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with...

ColdFusion Initial Dangerous Functions Unauthorized Access

The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information...

Navigation Component Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to deficiencies in system-defined boundary controls. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially creat...