CVE-2021-27426

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

CVE-2021-27426: Insecure Default Variable Initialization

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user...

PT-2022-9816

Name of the Vulnerable Software and Affected Versions GE UR IED firmware versions prior to 8.1x Description The issue concerns the inability to disable the "Factory Mode" in the firmware, which is used for servicing by a "Factory" user. This mode is accessible with the "Basic" security variant...

Dell BIOS Buffer Overflow

The vulnerability of BIOS microprogramming software in Dell laptops arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-25456

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...

CVE-2022-25456

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...

CVE-2022-1002: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

Format string

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...

CVE-2022-26320

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...

CVE-2022-26320: Use of Insufficiently Random Values

The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...

HP PC security vulnerabilities

HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in the HP PC BIOS that allows privilege escalation, arbitrary code execution, unauthorized code execution, denial of service, and information disclosure...

DEBIAN-CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...

Microsoft Visual Basic Office Information Disclosure

The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite is related to the disclosure of sensitive information in error-prone data areas. Exploiting this vulnerability can allow attackers to disclose protected information...

ruby: BasicSocket#read_nonblock method leads to information disclosure

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

Denial Of Service (DoS)

Brandy is vulnerable to denial of service. An attacker can cause a heap-based buffer overflow in definearray in variables.c via crafted BASIC source code...

Out-of-bounds Write

Brandy is vulnerable to an out-of-bounds write. This is caused by the fileioopenout function in fileio.c receiving a malicious string via crafted BASIC source code...

net.mingsoft:ms-mcms (5.2.0.release), net.mingsoft:ms-mdiy (1.0.28) +2 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.36)

net.mingsoft:ms-basic MAVEN version 1.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 5.2.0.release - net.mingsoft:ms-mdiy 1.0.28 - net.mingsoft:ms-mpeople 1.0.33 -...

net.mingsoft:ms-mdiy (1.0.8), net.mingsoft:ms-mpay (1.0.3) +2 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.9)

net.mingsoft:ms-basic MAVEN version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.8 - net.mingsoft:ms-mpay 1.0.3 - net.mingsoft:ms-mpeople 1.0.8 - net.mingsoft:ms-mweixin 1.0...

net.mingsoft:ms-mattention (1.0.4), net.mingsoft:ms-mcms (5.1) +7 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.31)

net.mingsoft:ms-basic MAVEN version 1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mattention 1.0.4 - net.mingsoft:ms-mcms 5.1 - net.mingsoft:ms-mcomment 1.0.4 - net.mingsoft:ms-mdiy...

net.mingsoft:ms-datascope (1.0.0), net.mingsoft:ms-id (1.0.1) +9 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.28)

net.mingsoft:ms-basic MAVEN version 1.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-datascope 1.0.0 - net.mingsoft:ms-id 1.0.1 - net.mingsoft:ms-init 1.0.0 - net.mingsoft:ms-mactiviti...