‘Glowworm’ Attack Turns Light Flickers into Audio

Virtual meetings are vulnerable to a new, exotic attack called Glowworm, which measures an audio output device’s LED power light changes and converts them to audio reproductions — allowing cyberattackers to listen to sensitive conversations. As an increasing amount of business is being conducted...

Unspecified Vulnerability in HCC Embedded InterNiche (CNVD-2021-59225)

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche stack versions prior to 4.3 and NicheLite versions prior to 4.3, which can be exploited by an attacker to cause an infinite loop that interrupts TCP/IP communication...

The vulnerability of the PBX software for IP communications allows attackers to carry out cross-site scripting attacks.

The vulnerability of PBX software for IP communications is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Security Bulletin: A vulnerability has been found in IBM Cloud Pak for Applications v4.3 where insecure http communications is used

Summary A vulnerability has been found in IBM Cloud Pak for Applications v4.3 where insecure http communications is used Vulnerability Details CVEID: CVE-2021-20360 DESCRIPTION: IBM Cloud Pak for Applications uses weaker than expected cryptographic algorithms that could allow an attacker to decry...

PJSIP competition condition issue vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.A contention problem vulnerability exists in PJSIP, which stems from improper handling of concurrent access when concurrent code need...

编号撤回

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation USA. This CVE number has been withdrawn...

Docker before 1.3.3 does not properly validate image IDs which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

...

Unauthorized Access Vulnerability in Axis Communications AB AXIS 241SA

The AXIS 241SA is a network video server from Axis Communications AB. An unauthorized access vulnerability exists in the Axis Communications AB AXIS 241SA, which can be exploited by an attacker to obtain sensitive information and perform unauthorized operations...

Eclipse TinyDTLS encryption issue vulnerability

Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...

Directory Traversal Vulnerability in P&T's Commercial Web Cloud Platform

"TP-LINK" is a leading global supplier of network communication equipment. A directory traversal vulnerability exists in TP-LINK's commercial network cloud platform, which can be exploited by attackers to obtain sensitive information...

多款Qualcomm产品输入验证错误漏洞

Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm.QCA6574AU is a central processing unit CPU product.SDX55 is a modem.IPQ6018 is a central processing unit CPU product. qualcomm An input validation error vulnerability exists in multiple products, which stems from a lack ...

Command Execution Vulnerability in Airspace Technologies WIFISKY Layer 7 Flow Control Router

Shenzhen Airspace Technology Co., Ltd "Airspace Technology" is a network communication equipment supplier rooted in Shenzhen radiation, dedicated to the research and development of network communication equipment products. A command execution vulnerability exists in the Airspace Technology WIFISK...

CVE-2021-1134

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

Input validation

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

MITRE Engenuity™ ATT&CK Evaluations & Framework

With the MITRE ATT Framework, you can simplify security communications across your organization while providing visibility to your security teams...

[SECURITY] Fedora 33 Update: openssh-8.4p1-7.fc33

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Command Execution Vulnerability in Intelligent Edge Gateway of China Mobile Communications Corporation Ltd.

China Mobile Communications Corporation CMCC, the largest mobile communications operator in China, specializes in mobile voice, data, IP telephony and multimedia services. A command execution vulnerability exists in the Smart Edge Gateway of China Mobile Communications Corporation, which can be...

Arbitrary File Read Vulnerability in Fiberhome Network Behavior Audit System

Established in 1999, Fiberhome Communication Technology Co., Ltd. is currently the only scientific research and industrial entity integrating three strategic technologies in the field of optical communication in China. An arbitrary file read vulnerability exists in Fiberhome Network Behavior Audi...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL commands and gain unauthorized access to modify data.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P web interface management interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands an...

Unauthorized Access Vulnerability in Axis-M1104 Network Camera

Axis Communications AB is an IT company specializing in providing network video solutions. An unauthorized access vulnerability exists in Axis-M1104 Network Camera, which can be exploited by attackers to obtain sensitive information...