CVE-2021-27671

An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing for example Data: to be used in an attack...

CVE-2021-27671

The CVE-2021-27671 issue affects the comrak crate for Rust (pre-0.9.1). The root cause is a case-sensitive protection check for data: and javascript: URLs, allowing data: URLs to bypass the guard and enable cross-site scripting (XSS). This is described consistently across sources (NVD entry and R...

EulerOS 2.0 SP2 : perl (EulerOS-SA-2021-1342)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in...

EulerOS 2.0 SP5 : perl (EulerOS-SA-2021-1222)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in...

EulerOS 2.0 SP3 : perl (EulerOS-SA-2021-1107)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in...

Medium: libxslt

Issue Overview: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded. CVE-2019-110...

Amazon Linux AMI : libxslt (ALAS-2021-1463)

The version of libxslt installed on the remote host is prior to 1.1.28-6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1463 advisory. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite perm...

FRITZ!Box 7.20 - DNS Rebinding Protection Bypass Vulnerability

Exploit Title: FRITZ!Box 7.20 - DNS Rebinding Protection Bypass Date: 2020-06-23 Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://en.avm.de/ Version: 7.20 CVE: 2020-26887 Advisory: FRITZ!Box DNS Rebinding Protection Bypass RedTeam Pentesting discovered a vulnerability in FRITZ!Box...

Intel Thunderbolt DCH drivers elevation of privilege vulnerability

Intel Thunderbolt DCH drivers is an American Intel driver for Windows. A security vulnerability exists in the IntelR ThunderboltTM DCH drivers, which arises from a protection mechanism failure that could allow an authenticated user to potentially enable privileged escalation via local access...

Design/Logic Flaw

Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...

CVE-2020-12324

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12324

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access...

Information disclosure

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12328

Intel Thunderbolt DCH drivers for Windows before version 72 are affected by CVE-2020-12328, a protection mechanism failure that may allow a local privileged user to disclose information. Affected products are Intel Thunderbolt 3 and 4 DCH drivers for Windows prior to v72. Intel and system manufac...

Session fixation

Protection mechanism failure in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12318

Protection mechanism failure in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8690: Undefined Security Weakness

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-12328: Undefined Security Weakness

Protection mechanism failure in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

PT-2020-4897

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 700 Series Controllers versions prior to 7.3 Description: The issue is related to a protection mechanism failure, which may allow a privileged user to potentially enable escalation of privilege and/or denial of service via loc...

Integer Overflow

Linux kernel is vulnerable to Integer Overflow. A child process could send arbitrary signals to a privileged suidroot parent process which interferes with donotifyparent protection mechanism...