CVE-2021-28649

An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a...

Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability (CNVD-2021-55894)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks. a cross-site scripting vulnerability exists in Aruba ClearPass Policy Manager, which stems from the lack of proper validation of client data by the WEB...

Microsoft Windows Multiple Vulnerabilities (KB5003197)

This host is missing a critical security update according to Microsoft KB5003197 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability (CNVD-2021-55893)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks. a cross-site scripting vulnerability exists in Aruba ClearPass Policy Manager, which stems from the lack of proper validation of client data by the WEB...

Code injection

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

UBUNTU-CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point AP forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients an...

UBUNTU-CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check authenticity of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the...

U.S. Intelligence Agencies Warn About 5G Network Weaknesses

Inadequate implementation of telecom standards, supply chain threats, and weaknesses in systems architecture could pose major cybersecurity risks to 5G networks, potentially making them a lucrative target for cybercriminals and nation-state adversaries to exploit for valuable intelligence. The...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in various Juniper products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Juniper's 2021-05 Out-of-Cycle Security...

Qualcomm Chipsets 输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip is vulnerable to an input validation error. An attacker...

Command Execution Vulnerability in the Backend of Ruijie Unified Internet Behavior Management and Audit System

Ruijie Unified Internet Behavior Management and Auditing System is an Internet behavior management and auditing product independently developed by Ruijie Networks. A command execution vulnerability exists in the backend of Ruijie Unified Internet Behavior Management and Audit System, which can be...

Juniper Junos OS DoS (JSA11168)

The version of Junos OS installed on the remote host is affected by denial of service vulnerabilities as referenced in the JSA11168 advisory: - On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daem...

Command Execution Vulnerability in BCOS of Riptide Networks Inc.

BCOS is a home router. A command execution vulnerability exists in the Riptide Networks Corporation BCOS, which can be exploited by an attacker to reboot the device...

Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability (CNVD-2021-33527)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...

Aruba Networks AirWave Management Platform Command Injection Vulnerability (CNVD-2021-33526)

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. A command injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a special...

Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-55896)

Aruba ClearPass Policy Manager is an application that provides a secure access management system for wireless networks.An information disclosure vulnerability exists in the Aruba ClearPass Policy Manager WEB interface, which can be exploited by remote attackers to submit special requests that can...

The vulnerability of the Pulse Connect Secure corporate network VPN server, related to authentication errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...