PT-2021-4878 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Intune Management Extension affected versions not specified Description: The issue is related to errors in security settings, allowing a bypass of security restrictions. Exploitation of this issue may enable an attacker to circumvent security...

SonicWall Issues Patches for a New Critical Flaw in SMA 100 Series Devices

Network security company SonicWall has addressed a critical security vulnerability affecting its Secure Mobile Access SMA 100 series appliances that can permit remote, unauthenticated attackers to gain administrator access on targeted devices remotely. Tracked as CVE-2021-20034, the arbitrary fil...

CVE-2021-30713

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited...

Critical Auth Bypass Bug Affect NETGEAR Smart Switches — Patch and PoC Released

Networking, storage and security solutions provider Netgear on Friday issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of a vulnerable device. The flaws, which were discovered and reported to Netgear by...

CVE-2021-28589 Adobe Media Encoder TS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder version 15.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

CVE-2021-22388

There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...

The vulnerability of the client-side SCP mechanism in OpenSSH, which arises due to insufficient validation of input data, allows attackers to overwrite arbitrary files in the client’s download directory.

The vulnerability of the client-side SCP component in OpenSSH exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to rewrite any files in the client’s download directory by creating a sub-directory anywhere on the remote server...

CVE-2021-22354

There is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause out-of-bounds read...

JTEKT TOYOPUC PLC

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: JTEKT Corporation Equipment: TOYOPUC PLC Vulnerability : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this...

Google Android rw_i93_send_to_lower elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android rwi93sendtolower. An attacker can exploit this vulnerability to cause a local elevation of privilege...

Google Android Denial of Service Vulnerability (CNVD-2021-44943)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. A denial of service vulnerability exists in Google Android 11. The vulnerability is caused due to a denial of service due to a missing null check in the RenderStruct of...

The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

Tor 缓冲区错误漏洞

Tor is a network of virtual tunnels. It allows individuals and groups to improve their privacy and security on the Internet. A buffer error vulnerability exists in Tor. The vulnerability arises from a networked system or product performing operations in memory without properly validating data...

PT-2021-20027

Name of the Vulnerable Software and Affected Versions Dahua ipc-hum7xxx firmware Dahua ipc-hx3xxx firmware Dahua ipc-hx5xxx firmware Dahua sd1a1 firmware Dahua sd22 firmware Dahua sd49 firmware Dahua sd50 firmware Dahua sd52c firmware Dahua sd6al firmware Dahua tpc-bf1241 firmware Dahua tpc-bf222...

Command Execution Vulnerability in Digital OA (EKP) at Shenzhen Lanling Software Co.

Ltd. was founded in Shenzhen Science and Technology Park in 2001. BlueLine is a well-known large platform OA service provider and a leading knowledge management solution provider in China, and is a national high-tech enterprise specializing in knowledge-based consulting, software development,...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-36563)

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in the tf.rawops.AddManySparseToTensorsMap implementation in TensorFlow versions prior to 2.5.0. An attacker could exploit this vulnerability to cause a CHECK-failure denial of servi...

PuppyCMS Arbitrary File Deletion Vulnerability

puppyCMS is a very simple, flat file CMS. An arbitrary file deletion vulnerability exists in puppyCMS version 5.1. The vulnerability stems from the fact that there is no path to any restriction. A remote attacker can exploit this vulnerability to delete files/folders via /admin/functions.php...

Weak Password Vulnerability in Ruiyou Yilian Remote Access System

Xingtai Zhigong Software Service Center Dingzhi Technology, is a company focusing on the Shenzhou Zhigong series of miniature specialty store management software development services. A weak password vulnerability exists in the Ruiyou Yilian remote access system, which can be exploited by attacke...

Unauthorized Access Vulnerability in DIR-816 750M11AC Wireless Router

The AUO DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. The DIR-816 750M11AC wireless router suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in S7706 and S9303 of Huawei Technologies Co.

Huawei Technologies Limited operates in the areas of switches, transmission equipment, data communication equipment, broadband multimedia equipment, power supply, wireless communication equipment, microelectronic products and software. A weak password vulnerability exists in S7706 and S9303 of...