Cisco Content Security Management Appliance Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is bei...

PT-2021-8267 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76: mt7915 component in the Linux kernel, where a vulnerability was resolved by properly checking rate info to fix unexpected reporting. The vulnerability...

UBUNTU-CVE-2021-25284

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...

PYSEC-2021-53

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...

CVE-2021-25284

An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...

CVE-2021-24084

creationtimestamp| type| source ---|---|--- 2021-02-26 02:38:30+00:00| seen| https://t.me/cibsecurity/24169 2021-11-26 20:17:37+00:00| published-proof-of-concept| Telegram/ZgrYaKfoWxLUgzZDTo8GaEF-rvAT9lk-J3ogZvhycztJVHH 2021-11-28 12:01:28+00:00| seen| https://t.me/ctinow/43023 2021-11-28...

Saltstack SaltStack Salt 安全漏洞

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to Salt 3002.5 that stems from the ability to log...

CVE-2021-24106

Windows DirectX Information Disclosure Vulnerability...

CVE-2021-24087

Azure IoT CLI extension Elevation of Privilege Vulnerability...

CVE-2021-24077

Windows Fax Service Remote Code Execution Vulnerability...

CVE-2021-24079

CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...

CVE-2021-24071

CVE-2021-24071 is a Microsoft SharePoint Information Disclosure Vulnerability. The NVD entry lists a network-attack, low-complexity flaw with partial confidentiality impact (CVSSv2 4.0; CVSSv3.1 6.5; secrecy impact HIGH per CNA). Connected Nessus plugins describe multiple SharePoint vulnerabiliti...

U.S. Dept Of Defense: Blind Stored XSS on ███████ leads to takeover admin account

Hello Team, I am Hemant Patidar working as a security researcher and I found a bug in your site. Report of bug is as follows:- Vulnerable URL: https://████████/ Description: I have found that various field of the profile page is not properly configured to wipe out HTML tags and Javascript code...

The vulnerability of the Page Info component in the Google Chrome web browser allows attackers to perform spoofing attacks using a specially created request.

The vulnerability of the Page Info component in the Google Chrome web browser is related to the bypassing of authentication processes through spamming. Exploiting this vulnerability allows a malicious actor to carry out spamming attacks using a specially created request...

CVE-2020-11281

CVE-2020-11281 affects Qualcomm Snapdragon platforms (Auto/Compute/Connectivity/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/V&M/Wired Infrastructure and Networking). The issue arises from a logic that links RTT frames with non-randomized MAC addresses by comparing sequenc...

Important: unzip

Issue Overview: Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive. CVE-2015-7697 Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a...

CVE-2021-21512

Dell EMC PowerProtect Cyber Recovery 19.7.0.1 contains an Information Disclosure vulnerability that can allow a locally authenticated, high-privileged Cyber Recovery user to takeover a notification email account. Affected component: PowerProtect Cyber Recovery; root cause: not explicitly detailed...

Cisco Identity Services Engine Sensitive Information Disclosure (cisco-sa-ise-info-exp-8RsuEu8S)

According to its self-reported version, Cisco Identity Services Engine Software is affected by multiple information disclosure vulnerabilities in its admin portal component due to improper enforcement of administrator privilege levels for sensitive data. An authenticated, remote attacker can...

CVE-2021-3271

PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...

Cross site scripting

PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...