PT-2021-18869

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description A race condition was addressed with improved state handling. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code...

PT-2021-18852

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Security Update versions prior to 2021-004 Catalina Security Update versions prior to 2021-005 Mojave Description An out-of-bounds write issue was addressed with improved input validation, which may allow a...

PT-2021-13599

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 7.6 macOS Big Sur versions prior to 11.5 Description: A logic issue was addressed with improved state management. Visiting a maliciously crafted webpage may lead to a system denial of service. Recommendations: For...

PT-2021-18874

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted file may disclose user information. Recommendations For iOS...

PT-2021-18881

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Description A permissions issue was addressed with improved validation. A malicious application may be able to access a user’s recent Contacts. Recommendations For macOS Big Sur versions prior to 11.5, upda...

PT-2021-18854

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Security Update versions prior to 2021-004 Catalina Description A logic issue was addressed with improved validation,...

KevinLAB BEMS 1.0 Unauthenticated SQL Injection / Authentication Bypass

KevinLAB BEMS 1.0 Unauthenticated SQL Injection / Authentication Bypass Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy...

KevinLAB BEMS 1.0 Authenticated File Path Traversal / Information Disclosure

KevinLAB BEMS 1.0 Authenticated File Path Traversal Information Disclosure Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy...

KevinLAB BEMS 1.0 Undocumented Backdoor Account

KevinLAB BEMS 1.0 Undocumented Backdoor Account Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy management platform. KevinLAB'...

F5 BIG-IP Edge Client Windows 7.2.1 < 7.2.1.3 / 7.1.6 < 7.1.9.9 Update 1 DLL Hijacking (K33757590)

The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is 7.2.1 before 7.2.1.3, or between 7.1.6 and 7.1.9.9 Update 1. It is, therefore, affected by a DLL hijacking vulnerability. A local attacker can exploit this using a malicious DLL to gain...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K33757590)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.4 / 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K33757590 advisory. - On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue...

F5 Networks BIG-IP : Node.js vulnerability (K07944249)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.4.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K07944249 advisory. - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could...

Weak Password Vulnerability in TopGate500 of Skyrun Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A weak password vulnerability exists in TopGate500 of Tianrongxin Technology Group, which allows an attacker to log in to...

F5 Networks BIG-IP : Python vulnerabilities (K57542514)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the K57542514 advisory. Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding with an...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K08503505)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K08503505 advisory. - On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows...

PT-2021-5769

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 Safari versions prior to 14.1.2 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Description Processing maliciously crafted web content may lead to code execution. The...

PT-2021-5768

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 Safari versions prior to 14.1.2 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 tvOS versions prior to 14.7 Description The issue is related to a use after free problem, which was addressed with...

F5 Networks BIG-IP : Linux kernel vulnerability (K04337834)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.5.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K04337834 advisory. Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or...

Command Execution Vulnerability in TopGate500 at Skyrise Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A command execution vulnerability exists in TopGate500 of Tianrongxin Technology Group, which can be exploited by an...

Logic Flaw Vulnerability in Hikvision Networking Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A logic flaw vulnerability exists in the Hikvision networking gateway, which can be exploited by attackers to obtain...