Authentication flaw

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

INSMA Wifi Mini Spy 1080P HD Security IP Camera 安全漏洞

INSMA Wifi Mini Spy 1080P HD Security IP Camera is a camera from INSMA USA. A security vulnerability exists in INSMA Wifi Mini Spy 1080P HD Security IP Camera version 1.9.7 B, which can be exploited by an attacker to gain administrator privileges via a customized request to "/goform/formUserMng"...

Path traversal

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2021-1436 Cisco IOS XE SD-WAN Software Path Traversal Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2021-1435 Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the root user. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted...

Cisco IOS XE SD-WAN Software Path Traversal Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

Envato WoWonder SQL注入漏洞

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. A security vulnerability exists in WoWonder 3.1, which can be exploited by remote attackers to gain access to a database via request .php...

Integer overflow

An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request...

CVE-2020-29238

An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information when the server running as reverse proxy via specially crafted request...

ALPINE-CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

UBUNTU-CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

PT-2021-2396 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the OpenType Font Parsing component of Windows operating systems. It allows remote attackers to execute arbitrary code by...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

Rockwell Automation 1734-AENTR 授权问题漏洞

The Rockwell Automation 1734-AENTR is an industrial device from Rockwell Automation, Inc. It provides an industrial control system. The Rockwell Automation 1734-AENTR suffers from an authorization issue vulnerability that arises from an unauthenticated attacker being able to send a crafted reques...

CVE-2020-4725

IBM Monitoring IBM Cloud APM 8.1.4 could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force ID: 187974...

The vulnerability of the vSphere Client plugin for managing VMware vCenter Server allows a hacker to execute arbitrary code.

The vulnerability of the vSphere Client plugin for managing VMware vCenter Server lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request remotely...

Authentication flaw

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator MSO installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to improper token validation on a specific API endpoint...

MGASA-2021-0089 Updated privoxy package fixes security vulnerabilities

Fixed a memory leak when decompression fails "unexpectedly". CVE-2021-20216 Prevent an assertion from getting triggered by a crafted CGI request. CVE-2021-20217...