Privilege escalation

There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...

CVE-2021-40044

There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorized operations...

Huawei EMUI 安全漏洞

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. Huawei EMUI suffers from an authorization issue vulnerability, which stems from a privilege authentication vulnerability in the system's Bluetooth module. An attacker can exploit this vulnerability to...

Mozilla Firefox 安全特征问题漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security signature issue vulnerability exists in Mozilla Firefox, which arises from a product framework root content security policy directive that does not restrict framework extension pages. A remote attacker could use...

IBM Cognos Analytics Cross-Site Request Forgery Vulnerability (CNVD-2021-95246)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A security vulnerability exists...

Unauthorized Access Vulnerability in ioLogik E1242 Series of Mosaic Technology (Shanghai) Co.

The ioLogik E1242 series are daisy-chained Ethernet switches that support the most commonly used I/O data acquisition protocols to match a wide range of applications. Mosa Technologies Shanghai Co., Ltd. ioLogik E1242 series suffers from an unauthorized access vulnerability, which can be exploite...

Signature Verification Bypass

ecdsa-node is vulnerable to signature verification bypass. The vulnerability exists because the ranges of signature r and s in verify function of ecdsa.js are not properly validated. A malicious attacker is able to perform unauthorized operations by gaining access, forging signatures on arbitrary...

GHSA-9WX7-JRVC-28MM Signature verification vulnerability in Stark Bank ecdsa libraries

An attacker can forge signatures on arbitrary messages that will verify for any public key. This may allow attackers to authenticate as any user within the Stark Bank platform, and bypass signature verification needed to perform operations on the platform, such as send payments and transfer funds...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2021-84239)

IBM InfoSphere Information Server is a data integration platform from IBM Corporation. A security vulnerability exists in IBM InfoSphere Information Server, which stems from the vulnerability of IBM InfoSphere Information Server to cross-site request forgery, which could be exploited by an attack...

CVE-2021-21745

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click...

IBM Cloud Pak for Security 授权问题漏洞

IBM Cloud Pak for Security CP4S is an open security platform from IBM that connects to your existing data sources, generates deeper insights, and enables you to act faster with automation. IBM Cloud Pak for Security CP4S suffers from an authorization issue vulnerability in versions 1.7.0.0,...

DIAEnergie Cross-Site Request Forgery Vulnerability

DIAEnergie is an industrial energy management system from Delta Electronics. A cross-site request forgery vulnerability exists in DIAEnergie 1.7.5 and earlier versions. An attacker can exploit this vulnerability to perform unauthorized operations...

Janitza UMG604 has an unauthorized access vulnerability

The Janitza UMG604 is a power quality analyzer. An unauthorized access vulnerability exists in the Janitza UMG604, which can be exploited by an attacker to gain unauthorized access to sensitive information and perform unauthorized operations...

Unauthorized Access Vulnerability in SINDOH A603_A608 at SINDOH (Qingdao) Office Systems Co.

Xindu Qingdao Office System Co., Ltd. is a professional office equipment enterprise integrating research and development, production, sales and after-sales service. SINDOH A603A608 of SINDOH Qingdao Office Systems Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an...

Unauthorized Access Vulnerability in SINDOH A601_A606 at SINDOH (Qingdao) Office Systems Co.

Xindu Qingdao Office System Co., Ltd. is a professional office equipment enterprise integrating research and development, production, sales and after-sales service. SINDOH A601A606 of SINDOH Qingdao Office Systems Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuCentre-IV C2265

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in Fuji Xerox China Limited...

Unauthorized Access Vulnerability in Xerox WorkCentre 5325 of Fuji Xerox (China) Co.

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Xerox WorkCentre 5325 of Fu...

Unauthorized Access Vulnerability in Samsung (China) Investment Company Limited SL-J2960FW

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. More than 20 of Samsung's 30 companies have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS, Samsung Electro-Mechanics, Samsung Corning, Samsung Networks, Samsung Life, Samsung Fire, Samsu...

Unauthorized Access Vulnerability in Samsung (China) Investment Limited SL-J1560W Series

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. More than 20 of Samsung's 30 companies have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS, Samsung Electro-Mechanics, Samsung Corning, Samsung Networks, Samsung Life, Samsung Fire, Samsu...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuCentre-V 2060

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Fuji Xerox China Limited...