CVE-2021-36809

CVE-2021-36809 affects Sophos SSL VPN client. A local attacker with administrator privileges can overwrite arbitrary files on the system via the VPN client’s log handling, potentially causing a denial of service and data loss. Root cause described as a code issue in log path handling/back-end fil...

Tips to protect your data, security, and privacy from a hands-on expert

This post was authored by one of the most active helpers on the Malwarebytes forums who wishes to remain anonymous. Back in the early days of personal computing, perhaps one of the only real concerns was data loss from a drive failure. That risk still exists, but we all face many other threats...

CVE-2022-24413

Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss...

U.S. Dept Of Defense: Broken access control, can lead to legitimate user data loss

Hi team, During testing the security of ██████████ I found another possible attack vector: There are two reports preceding this one - https://hackerone.com/reports/1489470 and https://hackerone.com/reports/1489744 I will try to explain: When an user need access to that information system he fills...

Users Can Frontrun Calls to updateRewardsMetadata() And Claim Tokens Twice

Lines of code Vulnerability details Impact The updateRewardsMetadata function is called by the BribeVault contract by the admin role. The function will take a list of distributions which are used to update the associated reward metadata. It is expected that the merkle root will be updated to...

McAfee Data Loss Prevention ePO extension Blind SQLi (SB10376)

The remote host is running a version of McAfee ePolicy Orchestrator that is affected by a blind SQL injection vulnerability that allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with...

Mageia: Security Advisory (MGASA-2015-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-4775 · Apple +8 · Macos Monterey +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.3 iPadOS versions prior to 15.3 watchOS versions prior to 8.4 tvOS versions prior to 15.3 Safari versions prior to 15.3 macOS Monterey versions prior to 12.2 Description: A use after free issue was addressed with...

CVE-2021-4088

SQL injection vulnerability in Data Loss Protection DLP ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server...

CVE-2021-4088

SQL injection vulnerability in Data Loss Protection DLP ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server...

CVE-2021-4088

SQL injection vulnerability in Data Loss Protection DLP ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server...

Sql injection

SQL injection vulnerability in Data Loss Protection DLP ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server...

CVE-2021-4088

CVE-2021-4088 describes a SQL injection in McAfee Data Loss Prevention (DLP) ePO extension. The vulnerability affects DLP ePO extension versions 11.6.401 and 11.7.x up to 11.7.100, and 11.8.x prior to 11.8.100, allowing a remote authenticated attacker to inject unfiltered SQL into the DLP portion...

CVE-2021-4088 Blind SQL injection in DLP ePO extension

SQL injection vulnerability in Data Loss Protection DLP ePO extension 11.8.x prior to 11.8.100, 11.7.x prior to 11.7.101, and 11.6.401 allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server...

PT-2022-11319 · Mcafee · Data Loss Protection (Dlp) Epo Extension

Name of the Vulnerable Software and Affected Versions: Data Loss Protection DLP ePO extension versions 11.6.401 through 11.7.100 Data Loss Protection DLP ePO extension versions 11.8.x prior to 11.8.100 Description: A SQL injection vulnerability in the DLP ePO extension allows a remote authenticat...

Vulnerability fixed in McAfee Data Loss Prevention

A vulnerability has been fixed in McAfee Data Loss Prevention DLP. The vulnerability potentially allows a malicious party to execute code on the ePolicy Orchestrator-sever ePO. The malicious party must have access to the DLP database on the ePO server. Through a blind-SQL injection, it is possibl...

Oracle MySQL 缓冲区错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A buffer error vulnerability exists in MySQL Server due to an input validation error in the Server:Optimizer component in MySQL Server. A remote attacker could exploit this vulnerability to corrupt or delete data...

SUSE SLES12 Security Update : chrony (SUSE-SU-2021:4147-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:4147-1 advisory. Chrony was updated to 4.1: Add support for NTS servers specified by IP address matching Subject Alternative Name in server certificate Add...

CVE-2021-0958

In update of kmcompat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2021-0958

CVE-2021-0958 affects Android 11 and 12, with a logic error in km_compat.cpp that could lead to a loss of potentially sensitive data and a local denial of service. Exploitation requires no user interaction, and the issue can be triggered locally with user privileges. The Red Hat/NVD entries corro...