SonicWall SonicOS Buffer Overflow (SNWLID-2021-0006)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a buffer overflow vulnerability. A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted unauthenticated HTTP request. This can...

CVE-2021-20019

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...

Spoofing

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...

CVE-2021-20019

CVE-2021-20019 describes a memory disclosure in SonicOS HTTP server: an unauthenticated, crafted HTTP request may cause the server to leak partial memory, potentially exposing sensitive data. Reported by multiple sources to affect SonicOS generations (SonicOS/SonicWall devices); some entries list...

CVE-2021-20019

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability...

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists because measures to neutralize special elements used in operating system commands have not been implemented. Exploiting this vulnerability can allow attackers to compromise the confidentialit...

Buffer Overflow in HTTP Request Header Leads to Partial Memory Leak

A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted unauthenticated HTTP request. This can potentially lead to an internal sensitive data disclosure vulnerability. CVE: CVE-2021-20019 Last updated: Sept. 1, 2021, 10:17 p.m...

CVE-2020-22170

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\getdoctor.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

CVE-2021-0541

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0552

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

CVE-2021-0572

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...

CVE-2021-0563

In ih264efmtconv422ito420sp of ih264efmtconv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2021-4013 · Sonicos · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicOS affected versions not specified Description: A vulnerability in SonicOS allows the HTTP server response to leak partial memory when a crafted HTTP request is sent, potentially leading to an internal sensitive data disclosure issue. Th...

CVE-2021-0504

In avrcparsbrowsersp of avrcparsct.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2020-20474

White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2020-20467

White Shark System WSS 1.3.2 is vulnerable to sensitive information disclosure via defaulttaskadd.php, remote attackers can exploit the vulnerability to create a task...

The vulnerability of the fill_thread_core_info() function in the Linux operating system allows a hacker to disclose sensitive information and cause service interruptions.

The vulnerability of the fillthreadcoreinfo function in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information and cause service failures...

The vulnerability of the nginx HTTP-server’s range filter module allows attackers to disclose sensitive information.

The vulnerability of the nginx HTTP server’s range filter module is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to disclose sensitive information through a specially crafted request...

The vulnerability of the Cortado ThinPrint (TTC Parser) component in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a perpetrator to disclose protected information.

The vulnerability of the Cortado ThinPrint component TTC Parser, which is present in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client, relates to the reading of data beyond the specified buffer. Exploiting this vulnerability allows a malicious acto...

The vulnerability of the Cortado ThinPrint component (JPEG2000 Parser) in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client allows a malicious individual to disclose protected information.

The vulnerability of the Cortado ThinPrint component JPEG2000 Parser in the VMware Workstation hypervisor and the VMware Horizon Client for Windows virtualization client system relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow an attacker to...