CVE-2021-42055

ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker...

ZTE MF971R LTE router 安全漏洞

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps.A configuration file control vulnerability exists in the ZTE MF971R. An attacker could exploit the vulnerability to modify the device's configuration parameters, which could result ...

The vulnerability of the Windows operating system, related to the exposure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the exFAT file system of the Windows operating system, which is related to the disclosure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the exFAT file system of the Windows operating system is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Windows operating system’s Bind Filter driver, related to the disclosure of protected information, allows a perpetrator to gain access to protected information.

The vulnerability of the Windows operating system’s Bind Filter driver is related to the exposure of protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Windows Common Log File System Driver in Windows operating systems, related to privilege management errors, allows a perpetrator to obtain system privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain system privileges...

CVE-2021-38456 Moxa MXview Network Management Software

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

CVE-2021-23857

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system...

The vulnerability of the real-time operating system Zephyr’s memory allocation function allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Zephyr’s real-time operating system’s memory allocation function is caused by a numerical overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-20435

IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355...

CVE-2021-41087 Improperly Implemented path matching for in-toto-golang

in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticated attackers posing as functionaries i.e., within a trusted set of users for a layout are able to create attestations that may bypass DISALLOW rules in the sa...

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-33692

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories...

The vulnerability of the Apache Druid analytical database, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Druid analytical database is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-33716

A vulnerability has been identified in SIMATIC CP 1543-1 incl. SIPLUS variants All versions V3.0, SIMATIC CP 1545-1 All versions V1.1. An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext...

CVE-2021-38150

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the...

PT-2021-6971 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Ancillary Function Driver for WinSock, which can be exploited by a remote...

Privilege Escalation

linux is vulnerable to privilege escalation. The vulnerability exists due to an improper validation of the "intctl" field, allowing an attacker to be allowed to read and write physical pages of the host...

CVE-2021-34771

A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit this...