CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only...

Code injection

UNSUPPORTED WHEN ASSIGNED AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affect...

CVE-2021-25681

AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 706...

CVE-2021-25681

Summary: CVE-2021-25681 affects AdTran Personal Phone Manager 10.8.1. The issue enables exfiltration of data over DNS by using exposed web servers as DNS redirectors to tunnel arbitrary data via DNS. This could allow an attacker to leak information through DNS traffic. Root cause/tech details pro...

CVE-2021-25680

The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be...

CVE-2021-25679

CVE-2021-25679 affects AdTran Personal Phone Manager (authenticated stored XSS) with confirmed impact on v10.8.1 (and possibly later versions). Verified devices include NetVanta 7060/7100 (End of Life; no patch). Public details across sources (NVD, Exploit-DB, PacketStorm, GitHub repo) describe a...

CVE-2021-25679

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able t...

PT-2021-16751

Name of the Vulnerable Software and Affected Versions AdTran Personal Phone Manager version 10.8.1 Description The issue allows for exfiltration of data over DNS, potentially enabling exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS...

PT-2021-16750 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting XSS issues. These issues impact versions 10.8.1 and below, and...

PT-2021-16749 · Adtran · Adtran Personal Phone Manager +2

Name of the Vulnerable Software and Affected Versions: AdTran Personal Phone Manager versions 10.8.1 and earlier Description: The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting XSS issue. This issue impacts versions 10.8.1 and below, and...

April 13, 2021—KB5001342 (OS Build 17763.1879)

None None...

April 13, 2021—KB5001337 (OS Build 18363.1500)

None None...

April 13, 2021—KB5001347 (OS Build 14393.4350) - EXPIRED

None None...

April 13, 2021—KB5001339 (OS Build 17134.2145

None None...

Cisco Small Business RV Series Router Unsupported Detection

The Cisco Small Business RV series router is no longer supported. Note that only models RV110W, RV130, RV130W, and RV215W are detected at this time. Lack of support implies that no security patches for the product will be released by the vendor. As a result, it is likely to contain security...

DEBIAN-CVE-2021-28875

In the standard library in Rust before 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow...

Mozilla Rust 缓冲区错误漏洞

Rust is a systems programming language characterized by fast operation, the ability to prevent segmentation errors, and thread-safety. A buffer overflow vulnerability exists in the standard stock in versions of Rust prior to 1.50.0. The vulnerability stems from readtoend not validating the return...