F5 Networks BIG-IP : Linux kernel vulnerability (K51674118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.3 / 15.1.4 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K51674118 advisory. The coredump implementation in the Linux kernel before 5.0.10 does not use locking or...

Microsoft Edge (Chromium-Based) Elevation of Privilege Vulnerability (Jun 2021)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2021-20730

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors...

CVE-2021-20731

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors...

CVE-2021-20731

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors...

Improper access control

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors...

Design/Logic Flaw

WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors...

CVE-2021-20730

Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors...

SUSE: Security Advisory (SUSE-SU-2014:1541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2021-31199

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation...

VulnCheck KEV: CVE-2021-33739

Microsoft Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...

PT-2021-3302 · Microsoft · Windows Filter Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Filter Manager affected versions not specified Description: The issue is related to insufficient access control in the Windows Filter Manager, allowing an attacker to elevate their privileges. This could potentially impact system...

PT-2021-19610 · 3D Viewer · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer affected versions not specified Description: The issue concerns a remote code execution problem. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the momen...

PT-2021-3280 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to resource release errors in Windows Remote Desktop Services, which can be exploited by a remote attacker to cause a denial of service. This...

PT-2021-19611 · 3D Viewer · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer affected versions not specified Description: The issue is related to an information disclosure vulnerability. There is no information available about the estimated number of potentially affected devices or real-world incidents where...

PT-2021-6358 · Microsoft · Windows Update Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Update Client affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows Update Client, which can be exploited to elevate privileges. This could allow an attacke...

PT-2021-3282 · Microsoft · Windows Mshtml Platform +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to errors in privilege management within the Windows HTML Platform component of the Windows operating system. This can allow a remote attacker to bypass...

PT-2021-7951 · Microsoft +3 · Asp.Net Core +4

Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft .NET platform, which can be exploited by a remote attacker to cause a denial of service. Recommendations: At the...

PT-2021-6306 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Installer component of the Microsoft Windows operating system. This vulnerability can be exploited t...

Buffalo WSR-1166DHP3 and WSR-1166DHP4 Access Control Error Vulnerability

Buffalo WSR-1166DHP3 and WSR-1166DHP4 are routers from BUFFALO INC. An access control error vulnerability exists in Buffalo WSR-1166DHP3 and WSR-1166DHP4, which could be exploited by an attacker to obtain configuration information via unspecified vectors...