4874 matches found
Feds Shut Down Fake COVID-19 Vaccine Phishing Website
Federal law enforcement in Maryland has shut down a fraudulent website targeting immigrant communities that claimed to be for a company developing a COVID-19 vaccine. Instead, the site was stealing information from people with the purpose of using it for future cybercriminal activity. The U.S...
CVE-2021-0248
This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Junip...
Maxim Nesen jersey 安全漏洞
Maxim Nesen jersey is a Maxim Nesen open source application . A REST framework that provides JAX-RS reference implementations and more. Maxim Nesen jersey has a security vulnerability that stems from the inclusion of a local information disclosure vulnerability. This is due to the use of file...
CVE-2021-25373
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O8.x, 2.4.03.0 in Android P9.0, 2.7.02.1 in Android Q10.0 and 2.9.01.1 in Android R11.0 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
Spoofing
A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...
CVE-2021-25373
The CVE-2021-25373 entry affects Samsung Customization Service for Android O–R. The issue is caused by unsafe PendingIntent usage in the Customization Service, allowing local attackers to perform unauthorized actions by hijacking PendingIntents. Affected versions are: Android O: prior to 2.2.02.1...
CVE-2021-25357
A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...
USN-4799-1: R vulnerability
It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service or execute arbitrary code...
USN-4799-1 r-base vulnerability
It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service or execute arbitrary code...
SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.
R&S Information Technology Shanghai Co., Ltd. is a company that deals with technology development in the field of information technology, cloud computing, and Internet of Things IoT technology. There is a SQL injection vulnerability in the Enterprise Standardized Management System of R&S...
SQL Injection Vulnerability in Enterprise Standardization Management System of Runshen Information Technology (Shanghai) Co.
R&S Information Technology Shanghai Co., Ltd. is a company that operates in the field of information technology, cloud computing, Internet of Things technology, such as technology development. There is a SQL injection vulnerability in the enterprise standardization management system of R&S...
The vulnerability of the programmable logic controller MELSEC iQ-R, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the programmable logic controller MELSEC iQ-R is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in the service process using a specially crafted package...
CVE-2021-27581
The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter...
CVE-2020-12374: Buffer Copy without Checking Size of Input
Buffer overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-24481
Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Insecure inherited permissions for the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8765
Incorrect default permissions in the installer for the IntelR RealSenseTM DCM may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-24504
Uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable denial of service via local access...