EUVD-2021-15467

Malware in sbrugna...

EUVD-2021-15466

Malware in sbrugna...

QNAP Roon Server未授权RCE漏洞（CVE-2021-28810、CVE-2021-28811）

...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Command injection

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Authentication flaw

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

CVE-2021-28811 refers to a command-injection flaw in Roon Server. The vulnerability, if exploited, could allow remote attackers to execute arbitrary commands. Roon Labs indicates fixes in Roon Server versions released on 2021-05-18 and later. Documents consistently identify the affected component...

CVE-2021-28811 Vulnerability in Roon Server

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810 Vulnerability in Roon Server

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810

CVE-2021-28810 affects Roon Server; an attacker could access resources that are normally protected by authentication. The underlying issue enables unauthorized access (authentication bypass) without needing prior credentials. CVSS details indicate a high impact (CONfidentiality: HIGH) on the CVSS...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

CVE-2021-28810: Authentication Bypass by Spoofing

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Roon 安全漏洞

Roon is a software component of Roon Labs' Digital Audio System. A security vulnerability exists in Roon Lab, which can be exploited by an attacker to gain access to resources that are inaccessible without proper authentication...

CVE-2021-28811: Improper Neutralization of Special Elements used in an OS Command

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Roon 命令注入漏洞

Roon is a software component of Roon Labs' Digital Audio System. A command injection vulnerability exists in Roon that could allow a remote attacker to run arbitrary commands...