14664 matches found
UBUNTU-CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size...
PT-2021-18940 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 Description: A logic issue was addressed with improved validation. An application with microphone permission may unexpectedly access microphone input during a...
CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size...
The vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows operating systems allows a intruder to gain unauthorized access to protected information.
The vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...
Security update for grafana (important)
openSUSE Security Update: Security update for grafana Announcement ID: openSUSE-SU-2021:1148-1 Rating: important References: 1183803 1183809 1183811 1183813 1184371 Cross-References: CVE-2021-27358 CVE-2021-27962 CVE-2021-28146 CVE-2021-28147 CVE-2021-28148 CVSS scores: CVE-2021-27358 NVD : 7.5...
AZL-6574 CVE-2021-3573 affecting package kernel for versions less than 5.10.78.1-1
A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...
CVE-2021-36933
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...
CVE-2021-26433
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...
CVE-2021-26433
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...
CVE-2021-36933
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability...
Google TensorFlow 数字错误漏洞
Google TensorFlow, an end-to-end open source machine learning platform, is vulnerable to a divide by zero error in versions prior to Google TensorFlow 2.6.0. An attacker could exploit the vulnerability through a specially crafted parameter call in-place to cause a floating point exception, which...
Rockwellautomation Rslinx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...
The vulnerability of the MS-EFSRPC protocol in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the MS-EFSRPC protocol in Windows operating systems is related to errors in processing SMB requests during authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Rockwellautomation Rslinx Improper Input Validation
FactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH: Version 14 and later, ControlFLASH Plus: Version 1 and later, FactoryTalk Asset Centre: Version 9 and later, FactoryTalk Linx CommDTM: Version 1 an...
MWB Point of Sale (POS) for WooCommerce < 1.0.1 - CSRF Bypass / Unauthorised AJAX Call
The plugin has a logic flaw in the CSRF checks, allowing them to be passed by not providing the related nonce parameter in the request. This could allow attacker to make logged in users do unwanted actions. v1.0.1 fixed the Bypass, however actions are still missing capability checks...
23andMe Yamale 代码问题漏洞
23andMe Yamale is the architecture and validator for open source YAML. A code issue vulnerability exists in 23andMe Yamale that stems from the pattern parser in 23andMe Yamale prior to version 3.0.8 using eval as part of its processing and attempting to prevent malicious expressions by limiting t...
DEBIAN-CVE-2021-38208
net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...
Null pointer dereference
net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...
