Oracle Linux 7 : microcode_ctl (ELSA-2021-2305)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2305 advisory. 2:2.1-73.9.0.1 - for Intel, do not trigger load if on-disk microcode is not an update Orabug: 30634727 - set earlymicrocode='no' in virtualized guests ...

CVE-2021-31538

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

Path traversal

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-31538

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-31538

CVE-2021-31538 affects LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5. The vulnerability is a Relative Path Traversal in LCOS FX 10.5 where input is not properly filtered for path traversal sequences, potentially allowing access outside of restricted directories. Affected product f...

CVE-2021-0104

Uncontrolled search path element in the installer for the IntelR Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0112

Unquoted service path in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Privilege escalation

Modification of assumed-immutable data in subsystem in IntelR CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

CVE-2021-0057

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0056

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0097

Summary : CVE-2021-0097 describes a path traversal vulnerability in the BMC firmware of Intel(R) Server Board M10JNP2SB, before EFI BIOS 7215 and BMC 8100.01.08. An unauthenticated user may potentially trigger a denial of service via adjacent access. Affected product : Intel Server Board M10JNP2S...

CVE-2021-0070

CVE-2021-0070: Improper input validation in the BMC firmware of Intel Server Board M10JNP2SB (EFI BIOS prior to 7215, BMC 8100.01.08) may allow an unauthenticated user to potentially escalate privileges via adjacent access. The affected product is Intel Server Board M10JNP2SB. Impact is privilege...

CVE-2020-8670

CVE-2020-8670 is a race-condition flaw in Intel processor firmware that could allow a local privileged attack. No public exploits are known in the provided documents. Affected data indicates local access is required, with INTEL-SA advisories (INTEL-SA-00463) and related mitigations referenced by ...

Weak password vulnerability in Brickcom-MD-300Np-360P

Brickcom Corporation Brickcom is composed of R&D team with rich experience in surveillance industry, and develops digital surveillance products with advanced technology. Including Mega IP Camera, Wireless IP Camera, Video Server, 3G Video Transmission NVR Embedded Network DVR, CMS Client Platform...

Information Disclosure Vulnerability in lenovonet Reporting Center

Ltd. "TGN" is a data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. Its predecessor is the R&D team of the Network Division of Lenovo Group, which was...

Mitsubishi Electric MELSEC iQ-R series 资源管理错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. A resource management error vulnerability exists in the MELSOFT communication port TCP/IP of the CPU unit of the Mitsubishi Electric MELSEC iQ-R Series, where a remote third party maintai...

Mitsubishi Electric MELSEC iQ-R Series

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Series Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may prevent legitimate clients from...

SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. A SQL injection vulnerability exists in the Enterprise Standardized Management System of R&S Information Technology Shanghai Co. An attacker can exploit the...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5003781)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5003781 Applies to:Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...

Feds Shut Down Fake COVID-19 Vaccine Phishing Website

Federal law enforcement in Maryland has shut down a fraudulent website targeting immigrant communities that claimed to be for a company developing a COVID-19 vaccine. Instead, the site was stealing information from people with the purpose of using it for future cybercriminal activity. The U.S...