CVE-2021-22957

A Cross-Origin Resource Sharing CORS vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect applicati...

PT-2021-15297 · Ubiquiti · Unifi Protect

Name of the Vulnerable Software and Affected Versions: UniFi Protect versions 1.19.2 and earlier Description: A Cross-Origin Resource Sharing CORS issue allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over the user's account. Recommendation...

Ubiquiti Networks UniFi Protect 安全漏洞

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A security vulnerability exists in the UniFi Protect application that allows a malicious actor using malicious code to convince a privileged user to access a URL to take over that user's account. The...

CVE-2021-23201

NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or...

CVE-2021-23219

CVE-2021-23219 affects NVIDIA GPU and Tegra hardware via an internal microcontroller vulnerability. The issue could allow a user with elevated privileges to access protected information by identifying, exploiting, and loading vulnerable microcode, potentially leading to information disclosure. Af...

CVE-2021-23197

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ;...

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2021-0200

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0148

Insertion of information into log file in firmware for some IntelR SSD DC may allow a privileged user to potentially enable information disclosure via local access...

CVE-2021-0198

Improper access control in the firmware for the IntelR Ethernet Network Controller E810 before version 1.5.5.6 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33059

Improper input validation in the IntelR Administrative Tools for IntelR Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0075

Out-of-bounds write in firmware for some IntelR PROSet/Wireless WiFi in multiple operating systems and some KillerTM WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

Input validation

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2021-0200

Out-of-bounds write in the firmware for IntelR Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

AIX (IJ35226)

The version of AIX installed on the remote host is prior to APAR IJ35226. It is, therefore, affected by a vulnerability as referenced in the IJ35226 advisory. - IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information...