10349 matches found
3 trends shaping identity as the center of modern security
I recently returned from Kenya, where I visited our Microsoft Nairobi development center. Like many of you, I’ve mostly worked from home for the past year and more, so it was refreshing to meet members of our global team and inspiring to feel their passion for our mission: delivering identity...
CVE-2021-20037
SonicWall Global VPN Client 4.10.5 installer 32-bit and 64-bit incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier...
SonicWall Global VPN Client Privilege Escalation via Application Installer
SonicWall Global VPN Client 4.10.5 installer 32-bit and 64-bit incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts 4.10.5 installer and earlier. CVE: CVE-2021-20037 Last...
SonicWall Global VPN client 安全漏洞
Sonicwall SonicWall Global VPN client is a Vpn software from SonicWall USA that works with the SonicWALL firewall. The software enables remote employees and vendors to access the company's network. A security vulnerability exists in SonicWall Global VPN Client 4.10.5 that stems from incorrect...
Prototype Pollution in cookiex/deep
The npm @cookiex/deep package before version 0.0.7 has a prototype pollution vulnerability. The global proto object can be polluted using the proto object...
GHSA-92V9-XH2Q-FQ9F Prototype Pollution in cookiex/deep
The npm @cookiex/deep package before version 0.0.7 has a prototype pollution vulnerability. The global proto object can be polluted using the proto object...
CVE-2021-32298
An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFFerrorId located in error.c. It allows an attacker to cause code Execution...
CVE-2021-32288
An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution...
CVE-2021-32286
An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an attacker to cause code Execution...
UBUNTU-CVE-2021-32286
An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an attacker to cause code Execution...
CVE-2021-32265
An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4MemoryByteStream::WritePartial located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure...
CVE-2021-32298
An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFFerrorId located in error.c. It allows an attacker to cause code Execution...
CVE-2021-32288
CVE-2021-32288 affects the HEIF project up to version 3.6.2. The issue is a global-buffer-overflow in the function HevcDecoderConfigurationRecord::getPicHeight() in hevcdecoderconfigrecord.cpp, allowing an attacker to achieve code execution. The connected documents confirm the vulnerability class...
CVE-2021-32286
An issue was discovered in hcxtools through 6.1.6. A global-buffer-overflow exists in the function pcapngoptionwalk located in hcxpcapngtool.c. It allows an attacker to cause code Execution...
CVE-2021-32265
The CVE-2021-32265 entry concerns Bento4 up to v1.6.0-637, where a global-buffer-overflow in AP4_MemoryByteStream::WritePartial() (Ap4ByteStream.cpp) could lead to code execution or information disclosure. The connected sources consistently describe the same underlying flaw but do not provide ven...
Gaming Industry Paves the Way
Currently at $200 billion per year and growing, the gaming industry has grown from humble beginnings in the 1930s during which games like Baffle Ball and pinball were considered a degenerate form of leisure that would lead young men into lives of sin into a massive global phenomenon widely seen a...
CVE-2021-23442
This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...
CVE-2021-23442
This affects all versions of package @cookiex/deep. The global proto object can be polluted using the proto object...
