PT-2021-18183

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: A buffer overflow vulnerability in FORMATS!ReadRAS W+0xa74 of Irfanview allows attackers to execute arbitrary code via a crafted RLE file. Recommendations: For Irfanview version 4.57, consider avoiding the...

PT-2021-18182

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: A buffer overflow vulnerability in the FORMATS!ReadRAS W+0xa30 function of Irfanview allows attackers to execute arbitrary code via a crafted RLE file. Recommendations: For Irfanview version 4.57, consider...

PT-2021-18185

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: The issue is related to an infinite loop that occurs when processing a crafted BMP file in the EFFECTS!AutoCrop W component, leading to a denial of service DOS. Recommendations: For Irfanview version 4.57,...

PT-2021-18184

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: A buffer overflow issue in the Formats!ReadRAS W+0x1001 function of Irfanview allows attackers to execute arbitrary code via a crafted RLE file. Recommendations: For Irfanview version 4.57, consider disabli...

PT-2021-18179

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.57 Description: A buffer overflow issue in the FORMATS!ReadPVR W+0xfa function of Irfanview allows attackers to cause a denial of service DOS via a crafted PVR file. Recommendations: For Irfanview version 4.57, consider...

Hikvision IP Camera Unauthenticated Command Injection

This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...

PT-2021-4028

Name of the Vulnerable Software and Affected Versions Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E5 v3, Intel Xeon Processors W affected versions not specified Description The issue is related to insecure default variable...

Intel BIOS Shared SW Architecture 授权问题漏洞

Intel BIOS Shared SW Architecture Intel BSSA is a BIOS shared software architecture from Intel Corporation. An authorization issue vulnerability exists in the Intel BIOS Shared SW Architecture due to an elevation of privilege vulnerability in the build time configuration of the Shared SW...

Intel BSSA DFT Advisory

Summary: A potential security vulnerability in the customer build time configuration for the Intel BIOS Shared SW Architecture BSSA Design for Test DFT feature may allow escalation of privilege. Intel is releasing detailed guidance to address this potential vulnerability. Vulnerability Details:...

CVE-2021-20738

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors...

CVE-2021-20738

CVE-2021-20738 affects Elecom WRC-1167FS-W, WRC-1167FS-B and WRC-1167FSA. An unauthenticated, network-adjacent attacker can obtain sensitive information via unspecified vectors. The connected documents do not specify technical root cause or fixed versions. A mitigation noted for these devices is ...

PT-2021-14194

Name of the Vulnerable Software and Affected Versions: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions Description: The issue allows an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors. Recommendations: At the moment, there is no informati...

CVE-2021-20738: Undefined Security Weakness

WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors...

ELECOM 多款产品安全漏洞

The Elecom ELECOM WRC and ELECOM WRH are both home-ready network cameras from Elecom Japan. A security vulnerability exists in multiple ELECOM products, which can be exploited by unauthenticated network neighbor attackers to obtain sensitive information via unspecified vectors. The following...

W-Agora CMS Detection (HTTP)

HTTP based detection of W-Agora CMS. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Unauthorized Access Vulnerability in Axis M1011-W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1011-W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis M1004-W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1004-W Network Camera, which can be exploited by attackers to obtain sensitive information...

Intel® Security Library Advisory

Summary: Potential security vulnerabilities in the Intel® Security Library may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0133 Description: Key...

CVE-2021-31252

The CVE-2021-31252 entry corresponds to an open redirect vulnerability in CHIYU Technology devices: BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC. According to the connected sources (NVD, CVE lists, CNNVD, PRION), the issue stems from an open redirect mechanism that can be...

CVE-2021-31252: URL Redirection to Untrusted Site

An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it...