PT-2022-4548

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior ICONICS GENESIS64 versions 10.90 to 10.97 Description The issue allows a local authenticated attacker to gain authentication information and access the database illegally due...

CVE-2021-40041: Improper Neutralization of Input During Web Page Generation

There is a Cross-Site ScriptingXSS vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input, a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain...

PT-2022-11163

Name of the Vulnerable Software and Affected Versions HUAWEI WS318n versions 10.0.2.2 through 10.0.2.6 Description The issue is related to a Cross-Site Scripting XSS vulnerability when processing network settings, caused by insufficient validation of user input. This could allow a local...

CVE-2021-44168: Download of Code Without Integrity Check

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages...

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

CVE-2021-36341

Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information...

CVE-2021-36341: Exposure of Sensitive Information to an Unauthorized Actor

Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information...

Security Bulletin: Jan 2020 : Multiple vulnerabilities in IBM Java Runtime affect CICS Transaction Gateway

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7.0, 7.1 and 8.0 used by CICS Transaction Gateway. CICS Transaction Gateway has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2593 DESCRIPTION: An unspecified vulnerability in Java SE...

PT-2021-6889 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions prior to 7.0.3 Description: A download of code without integrity check vulnerability in the "execute restore src-vis" command may allow a local authenticated attacker to download arbitrary files on the device via specially...

CVE-2021-36341

Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information...

CVE-2021-32600

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and t...

PT-2021-17003

Name of the Vulnerable Software and Affected Versions SEV Firmware affected versions not specified Description The issue is related to insufficient ID command validation in the SEV Firmware, which may allow a local authenticated attacker to perform a denial of service of the PSP. Recommendations ...

CVE-2021-26321: Improper Input Validation

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

PT-2021-17002

Name of the Vulnerable Software and Affected Versions AMD SEV Firmware affected versions not specified Description The issue is related to insufficient validation of the AMD SEV Signing Key ASK in the SEND START command in the SEV Firmware. This may allow a local authenticated attacker to perform...

CVE-2021-26320: Improper Certificate Validation

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

CVE-2021-36324

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-36323

Dell BIOS contains an input validation vulnerability that can allow a local authenticated attacker to gain arbitrary code execution in SMRAM by abusing System Management Interrupts (SMI). Affected component is Dell BIOS (embedded firmware on a Dell motherboard memory chip). The root cause is impr...

CVE-2021-36323: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-26320

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

kernel: Intel graphics card information leak.

An information disclosure flaw was found in the Linux kernel. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an attached i915 device. The highest threat from this vulnerability i...