2229 matches found
CVE-2021-28208 ASUS BMC's firmware: path traversal - Get video file function
The specific function in ASUS BMC’s firmware Web management page Get video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
CVE-2021-28207 ASUS BMC's firmware: path traversal - Get Help file function
The specific function in ASUS BMC’s firmware Web management page Get Help file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
CVE-2021-28207
The CVE describes a path traversal vulnerability in ASUS BMC firmware: the Web management page Get Help file function does not validate a parameter, allowing a remote attacker with administrator permissions to access system files. This is due to insufficient input filtering on the affected functi...
CVE-2021-28206 ASUS BMC's firmware: path traversal - Record video file function
The specific function in ASUS BMC’s firmware Web management page Record video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
CVE-2021-28206
ASUS BMC firmware Web management page vulnerability in the Record video file function allows path traversal due to improper parameter filtering. A remote attacker with administrator privileges could access system files. The CVE entry notes this results in high confidentiality impact, but there is...
CVE-2021-28205
The CVE-2021-28205 issue affects ASUS BMC firmware Web management (Delete SOL video file function). The vulnerability arises because the function does not filter a specific parameter, enabling path traversal when an administrator-authenticated session is established, allowing remote access to sys...
CVE-2021-28205 ASUS BMC's firmware: path traversal - Delete SOL video file function
The specific function in ASUS BMC’s firmware Web management page Delete SOL video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
CVE-2021-28209
The specific function in ASUS BMC’s firmware Web management page Delete video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...
ASUS BMC Firmware 路径遍历漏洞
ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a path traversal vulnerability that stems from the Record video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileges and then traverse...
ASUS BMC Firmware 路径遍历漏洞
ASUS BMC Firmware is a firmware from Asus China. ASUS BMC suffers from a path traversal vulnerability, which can be exploited by an attacker to gain administrator privileges to access system files via path traversal...
ASUS BMC Firmware 路径遍历漏洞
ASUS BMC Firmware is a firmware from Asus China. A path traversal vulnerability exists in the ASUS BMC Firmware Web management page, which can be exploited by a remote attacker to gain administrator privileges and then access system files via path traversal...
ASUS BMC Firmware 路径遍历漏洞
ASUS BMC Firmware is a firmware from Asus China. A path traversal vulnerability exists in the ASUS BMC Firmware Web management page, which stems from the Delete SOL video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileg...
CVE-2021-1786
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...
CVE-2021-1786
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...
Code injection
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...
CVE-2021-1786
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...
CVE-2021-1786
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...
Jellyfin 任意文件读取漏洞（CVE-2021-21402）
GHSL-2021-050: Unauthenticated abritrary file read in Jellyfin - CVE-2021-21402 Jaroslav Lobacevski Coordinated Disclosure Timeline - 2021-03-19: Issue reported to maintainers. - 2021-03-22: Version 10.7.1 with fixes was released. Summary Jellyfin allows unauthenticated arbitrary file read. Produ...