CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46560

The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage...

CVE-2021-46560

The CVE-2021-46560 entry concerns Moxa TN-5900 devices (firmware version 3.1 and earlier). A post-authentication command-injection vulnerability exists in the certificate management function web_CERMGMTUpload, allowing an authenticated user to inject OS commands through the cer_pw parameter, whic...

Adobe Acrobat and Reader Improper Input Validation (APSB22-01: CVE-2021-44712)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat And Reader Improper Input Validation (APSB22-01: CVE-2021-44739)

A vulnerability exists in Adobe. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader NULL Pointer Dereference (APSB22-01: CVE-2021-44740)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Violation of Secure Design Principles (APSB22-01: CVE-2021-44714)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Access of Uninitialized Pointer (APSB22-01: CVE-2021-44705)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

This Week in Security News - December 17, 2021

This week, read on Purple Fox’s infection chain observed by Trend Micro’s Managed XDR. Also, learn about the Log4j vulnerability that has the potential to cause ‘incalculable’ damage...

CVE-2021-41557

Sofico Miles RIA 2020.2 Build 127964T is affected by Stored Cross Site Scripting XSS. An attacker with access to a user account of the RIA IT or the Fleet role can create a crafted work order in the damage reports section or change existing work orders. The XSS payload is in the work order number...

Governed.sol: setPendingGov() should use the emergency_governed modifier.

Handle itsmeSTYJ Vulnerability details Impact In the event the governor gets compromised leaked pk, unauthorised remote access, phishing etc., you will not be able to recover it with the emergency governor however if the emergency governor gets compromised, you can still resolve the problem w/ th...

PTCL Modem HG150-Ub Authentication Bypass (CVE-2021-35296)

A vulnerability exists in PTCL HG150-Ub. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

New 'Moses Staff' Hacker Group Targets Israeli Companies With Destructive Attacks

A new politically-motivated hacker group named "Moses Staff" has been linked to a wave of targeted attacks targeting Israeli organizations since September 2021 with the goal of plundering and leaking sensitive information prior to encrypting their networks, with no option to regain access or...

CVE-2021-0635

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product:...

CVE-2021-0636

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

CVE-2021-0636

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

Code injection

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

Code injection

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product:...

CVE-2021-0635

CVE-2021-0635 affects the Video component (Unisoc/Android 10) where extracting an incorrectly formatted FLV file can corrupt memory, causing a crash and video playback failure. The Red Hat/NVD entries describe potential for malicious code execution leading to loss of user rights, with CVSS 3.1 ba...