The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose sensitive information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

The vulnerability of the WriteTIFFImage function in the program for reading and editing ImageMagick graphic files involves reading data beyond the allowed buffer limits. This allows attackers to access confidential information or cause service interruptions.

The vulnerability of the WriteTIFFImage function in the ImageMagick program, which is used for reading and editing graphic files, relates to the reading of data beyond the allowed buffer limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential information or t...

The vulnerability of the search_in_range function in the Oniguruma library, related to reading beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the searchinrange function in the Oniguruma library relates to integer overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the WritePNGImage function in the console-based image editing tool ImageMagick involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and cause service interruptions.

The vulnerability of the WritePNGImage function in the console-based ImageMagick graphics editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

The vulnerability of the library for simplifying project migration in Libbsd, related to reading beyond the permissible buffer data limits, allows attackers to gain access to confidential data and also trigger service failures.

The vulnerability of the library for simplifying project migration in Libbsd is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures...

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based machine vision systems lies in the insufficient encryption strength, allowing attackers to compromise protected information and carry out “insider attacks”.

The vulnerability of the microprogramming software in SICK Visionary-S CX hardware-based vision systems is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose protected information and carry out “insider attacks”...

PT-2021-5680 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Storage Spaces Controller driver, which can allow an attacker to gain unauthorized access to protected information. Th...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

Siemens SCALANCE FragAttacks

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE family devices Vulnerabilities: Improper Authentication, Injection, Improper Validation of Integrity Check, Improper Input Validation 2. RISK EVALUATION Successful...

CVE-2021-22916

In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure...

CVE-2021-29794

IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556...

Hms Networks eCatcher 安全漏洞

Hms Networks eCatcher is a VPN Virtual Private Network client application from the Swedish company HMS Networks. Hms Networks eCatcher suffers from a security vulnerability that stems from weak file system permissions that may allow access by malicious users. An attacker could exploit the...

rclone: Weak random number generation

Background rclone is a problem to sync files to and from various cloud storage providers. Description Passwords generated with rclone were insecurely generated and are vulnerable to brute force attacks. Impact Data kept secret with a password generated by rclone may be disclosed to a local...

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to disclose the protected information by caching the host key for the server...

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2021-7692 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the answer request function of the fuzz rfc1035.c component of the Dnsmasq DNS server. This could allow a remote attacker to access confidential...

The vulnerability of the gatttool disconnect_cb() subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ allows a intruder to access confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the gatttool disconnectcb subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ is related to the repeated release of a memory area due to an excessive disconnection event from MGMT. Exploiting this vulnerability allows an attacker to gain...

The vulnerability of the RTAS kernel component in the Linux operating system relates to the absence of a mechanism for authentication. This lack allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

IOBit Advanced SystemCare 安全漏洞

Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing and optimizing the system, among other things. A security vulnerability exists in IOBit Advanced SystemCare Ultimate, which stems from an...

IOBit Advanced SystemCare 安全漏洞

Iobit IOBit Advanced SystemCare is a system management utility program from the British company IOBit Iobit. The program is mainly used for scanning, repairing and optimizing your system, among other things. IOBit Advanced SystemCare Ultimate has a security vulnerability. A specially crafted I/O...