PT-2021-27993

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves functions such as pdfi free object, pdfi clear context, and pdfi free context. No...

PT-2021-8082

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.3-1 Description The vulnerability is related to a refcount underflow in the ffs data clear function of the usb f fs module. When userland closes ep0 and then unmounts f fs, ffs data clear is indirectly calle...

Aver EVC300 Firmware 00.10.16.36 Hardcoded Secrets

Firmware for Aver EVC300 multipoint video conferencing system v00.10.16.36 and others as well as firmware for several other devices manufactured by Aver, potentially all multipoint video conferencing systems contains multiple advanced features that are not well documented: 1. The web admin server...

Aver EVC300 Firmware 00.10.16.36 Hardcoded Secrets Vulnerability

Aver EVC300 firmware version 00.10.16.36 suffers from having multiple hard-coded secrets that can allow for access bypass. Firmware for Aver EVC300 multipoint video conferencing system v00.10.16.36 and others as well as firmware for several other devices manufactured by Aver, potentially all...

GSD-2021-1002571 drm/vc4: kms: Clear the HVS FIFO commit pointer once done

drm/vc4: kms: Clear the HVS FIFO commit pointer once done This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

PT-2021-26838

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.292 Description: The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. The actual impact and potential for attacks have not been...

PT-2021-26855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.0 through 4.14.256 Description A potential security issue exists due to improper use of the clear user function when clearing user buffers in the proc/vmcore component. The actual impact and attack plausibility have not...

PT-2021-26998

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.0 through 5.15.5 Description The issue is related to the proc/vmcore component of the Linux Kernel, where a user buffer is not properly cleared using the clear user function. This could potentially lead to security...

PT-2021-26823

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.0 through 4.4.293 Description: The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. The actual impact and potential for attack have not been...

PT-2021-26903

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.0 through 5.4.162 Description The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. This could potentially lead to security vulnerabilities,...

PT-2021-26877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.219 Description The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. The actual impact and potential for attacks have not been...

PT-2021-26937

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description The issue concerns a problem with clearing user buffers in the Linux Kernel, specifically with the use of the clear user function. The actual impact and potential for attacks have not been...

CVE-2020-8968

Parallels Remote Application Server RAS allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an...

Default credentials

Parallels Remote Application Server RAS allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an...

CVE-2020-8968

Parallels Remote Application Server RAS allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an...

CVE-2020-8968: Undefined Security Weakness

Parallels Remote Application Server RAS allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an...

Medium: curl

Issue Overview: A flaw was found in libcurl. When sending data to an MQTT server could in some situations lead to libcurl using already freed memory and then try to free it again. The highest threat from this vulnerability is to data confidentiality as well as system availability. CVE-2021-22945 ...

Sensitive information leak

A missing encryption of sensitive data vulnerability CWE-311 in FortiClientEMS may allow an authenticated attacker to view sensitive information in clear text via any browser development tool...

Require with not comprehensive message

Handle robee Vulnerability details The following requires has a non comprehensive messages. This is very important to add a comprehensive message for any require. Such that the user has enough information to know the reason of failure: Solidity file: GatewayVaultGovernance.sol, In line 63 with...

Italy's Antitrust Regulator Fines Google and Apple for "Aggressive" Data Practices

Italy's antitrust regulator has fined both Apple and Google €10 million each for what it calls are "aggressive" data practices and for not providing consumers with clear information on commercial uses of their personal data during the account creation phase. The Autorità Garante della Concorrenza...