CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25478

Summary: CVE-2021-25478 describes a possible stack-based buffer overflow in the Samsung Exynos CP Chipset prior to SMR Oct-2021 Release 1, which could enable arbitrary memory writes and code execution. The affected component is the Exynos CP Chipset; the root cause is a stack-based overflow vulne...

CVE-2021-25479: Heap-based Buffer Overflow

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

Samsung SMR 代码问题漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which originates from a mishandling of the Exynos CP boot driver and allows local attackers to...

PT-2021-16669

Name of the Vulnerable Software and Affected Versions: Exynos CP Chipset versions prior to SMR Oct-2021 Release 1 Description: A possible heap-based buffer overflow issue allows arbitrary memory write and code execution. Recommendations: For Exynos CP Chipset versions prior to SMR Oct-2021 Releas...

PT-2021-16668

Name of the Vulnerable Software and Affected Versions: Exynos CP Chipset versions prior to SMR Oct-2021 Release 1 Description: A possible stack-based buffer overflow vulnerability in the Exynos CP Chipset allows arbitrary memory write and code execution. Recommendations: For Exynos CP Chipset...

CVE-2021-25478: Stack-based Buffer Overflow

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

CVE-2021-25481: Improper Check for Unusual or Exceptional Conditions

An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory...

PT-2021-16671

Name of the Vulnerable Software and Affected Versions: Exynos CP booting driver versions prior to SMR Oct-2021 Release 1 Description: The issue is related to improper error handling in the Exynos CP booting driver, which allows local attackers to bypass the Secure Memory Protector of Exynos CP...

Privilege Escalation

github.com/moby/moby is vulnerable to privilege escalation. Attempting to copy files to a malicious container using docker cp allows an attacker to change the permission for existing files in the host's system...

CVE-2021-41089 `docker cp` allows unexpected chmod of host files

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem,...

CVE-2021-41089

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using "docker cp" into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem,...

CVE-2021-41089: Improper Preservation of Permissions

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where attempting to copy files using docker cp into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem,...

CVE-2021-33924

Confluent Ansible cp-ansible version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information...

CVE-2021-33924

CVE-2021-33924 affects Confluent Ansible (cp-ansible) versions 5.5.0, 5.5.1, 5.5.2 and 6.0.0. The vulnerability is an Incorrect Access Control in the auxiliary component, enabling remote attackers to access sensitive information. The Red Hat, NVD, OSV, CVE listing and other connected records corr...

CVE-2021-33923

CVE-2021-33923 affects Confluent Ansible (cp-ansible) versions 5.5.0, 5.5.1, 5.5.2 and 6.0.0. The issue is insecure permissions that allow a local attacker to access sensitive information (private keys, state database). The Red Hat/NVD entries corroborate the local-attack surface and information ...

CVE-2021-33923: Incorrect Default Permissions

Insecure permissions in Confluent Ansible cp-ansible 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information private keys, state database...

PT-2021-22857

Name of the Vulnerable Software and Affected Versions OpenSIS Community Edition version 8.0 Description The issue is a cross-site scripting XSS vulnerability. It affects the TakeAttendance.php file via the cp id miss attn parameter. Recommendations For OpenSIS Community Edition version 8.0,...

PT-2021-22856

Name of the Vulnerable Software and Affected Versions OpenSIS version 8.0 Description A SQL injection issue exists in the Take Attendance functionality, allowing an attacker to inject their own SQL query. The cp id miss attn parameter from TakeAttendance.php is vulnerable to SQL injection. An...

ALBA-2021:3587 opencryptoki bug fix and enhancement update

The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...