kernel: Intel graphics card information leak.

An information disclosure flaw was found in the Linux kernel. The i915 graphics driver lacks control of flow for data structures which may allow a local, authenticated user to disclose information when using ioctl commands with an attached i915 device. The highest threat from this vulnerability i...

CVE-2021-37207

A vulnerability has been identified in SENTRON powermanager V3 All versions. The affected application assigns improper access rights to a specific folder containing configuration files. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges...

CVE-2021-36325

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-36323

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2021-31377: Incorrect Permission Assignment for Critical Resource

An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routing process daemon RPD to crash and restart, causing a Denial of Service DoS. Repeated actions by the attacker will create a...

Juniper Junos OS Vulnerability (JSA11242)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11242 advisory. - An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routi...

CVE-2021-36284: Improper Restriction of Excessive Authentication Attempts

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack...

PT-2021-21201

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code...

CVE-2021-36285: Improper Restriction of Excessive Authentication Attempts

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack...

CVE-2021-36283: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

PT-2021-21202

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an Improper Restriction of Excessive Authentication Attempts. A local authenticated malicious administrator could exploit this to bypass excessive admin password...

CVE-2021-38863

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...

CVE-2021-1419

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

PT-2021-5054 · Cisco · Cisco Access Points +1

Name of the Vulnerable Software and Affected Versions: Cisco Access Points APs affected versions not specified Description: A vulnerability in the SSH management feature could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The issu...

Cisco Access Points 安全漏洞

Cisco Access Points is a network access point device from Cisco. A security vulnerability exists in the Cisco Access Points platforms, which is caused by an incorrect file operation check in the SSH management interface. An attacker could use this vulnerability to allow a local authenticated user...

CVE-2021-36284

Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack...

CVE-2021-28568

Adobe Genuine Services version 7.1 and earlier is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user...

CVE-2021-28568: Creation of Temporary File in Directory with Insecure Permissions

Adobe Genuine Services version 7.1 and earlier is affected by an Insecure file permission vulnerability during installation process. A local authenticated attacker could leverage this vulnerability to achieve privilege escalation in the context of the current user...

CVE-2021-0061

Improper initialization in some IntelR Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet Adapters 800 代码问题漏洞

Intel Ethernet Adapters 800 is an Ethernet adapter from Intel Corporation. A security vulnerability exists in the Intel Ethernet Adapters 800 series due to an incorrect condition check in the Linux driver. The vulnerability could allow an authenticated user with local access to disclose informati...