CVE-2021-31035

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

CVE-2021-30994

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...

CVE-2021-30994

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...

CVE-2021-30994

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...

Design/Logic Flaw

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...

CVE-2021-30994

CVE-2021-30994 is an Apple macOS Monterey 12.0.1 vulnerability. The Apple advisory states an access issue with improved access restrictions that could allow a malicious application to access local users’ Apple IDs. The CVE is documented in Apple’s security content for macOS Monterey 12.0.1 and in...

CVE-2021-30994

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...

PT-2021-19032

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.0.1 Description An access issue was addressed with improved access restrictions. A malicious application may be able to access local users' Apple IDs. Recommendations For versions prior to 12.0.1, update to macOS...

CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs...

CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs...

CVE-2021-26098

An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs...

HCC Embedded InterNiche 安全特征问题漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche that stems from a DNS client not setting enough random transaction ids in the DNSv4 component.An attacker can exploit this vulnerability to pass specially crafted inputs to the application...

PT-2021-29641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.13.5 Description The issue is related to the validation of channel IDs when processing command completions. It was introduced in version v5.7 and fixed in version v5.13.6. The actual impact and attack...

PT-2021-29699

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.10.53 Description The issue concerns the validation of channel IDs when processing command completions. It was introduced in version v5.7 and fixed in version v5.10.54. The actual impact and attack...

PT-2021-25704

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.54 Description: The issue is related to the validation of channel IDs when processing command completions. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-25646

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.13.5 Description: The issue is related to the validation of channel IDs when processing command completions. It was introduced in version v5.7 and fixed in version v5.13.6. The actual impact and attack...

FortiSandbox - Predictable session IDs of JSON API

An instance of small space of random values in FortiSandbox RPC API may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs...

Graylog 日志信息泄露漏洞

Graylog is a centralized log management solution from Graylog, Inc. The product supports capturing, storing, and analyzing logs in real-time, among other things. graylog suffers from a permission permission and access control issue vulnerability that stems from a session ID leak in audit logs pri...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...

CVE-2021-28674

The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...