CVE-2021-0999

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0995

In registerSuggestionConnectionStatusListener of WifiServiceImpl.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges...

Design/Logic Flaw

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0999

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-43223

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2021-43223

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2021-43223

CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...

CVE-2021-43223 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2021-43223 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2021-44549 SMTPS server hostname not checked when making TLS connection to SMTPS server

Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these addition...

CVE-2021-42027

A vulnerability has been identified in SINUMERIK Edge All versions V3.2. The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and...

PT-2021-5663 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.15.11 Description: The issue is related to a memory leak in the rds conn create function in net/rds/connection.c. This memory leak can occur under certain circumstances. The exploitation of this issue may allo...

Design/Logic Flaw

The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agent is subject to a man-in-the-middle attack due to improper certificate validation. IBM X-Force ID: 182046...

CVE-2020-4496

IBM Spectrum Protect Plus (IBM Spectrum Protect Plus server connected to a workload agent) is affected by CVE-2020-4496: MITM due to improper certificate validation in versions 10.1.0.0–10.1.8.x. The IBM security bulletin lists a fix in Spectrum Protect Plus 10.1.9 (Linux) and notes remediation/w...

golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

A flaw was found in Go, acting as an unintended proxy or intermediary, where ReverseProxy forwards connection headers if the first one was empty. This flaw allows an attacker to drop arbitrary headers. The highest threat from this vulnerability is to integrity...

SUSE-SU-2021:4004-1 Security update for glib-networking

This update for glib-networking fixes the following issues: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow a attacker to disclose the protected information...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to escalate their privileges within the system.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference flaw was found in the Linux kernels IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection...