PT-2021-15039

Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: A component of the HarmonyOS contains a Data Processing Errors issue. This can be exploited by local attackers to achieve Kernel Code Execution. Recommendations: At the moment, there is n...

CVE-2021-22414

There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset...

Design/Logic Flaw

There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset...

CVE-2021-22414

There is a Memory Buffer Errors Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset...

CVE-2021-22414

CVE-2021-22414 pertains to a memory buffer/stack overflow vulnerability in Huawei smartphones, described across multiple sources (Huawei EMUI/Magic UI stack). The vulnerability can lead to a system reset on successful exploitation. Publicly available details in connected documents are limited to ...

PT-2021-15037

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to Memory Buffer Errors, which can cause the system to reset upon successful exploitation. Recommendations: At the moment, there is no information about a new...

Mozilla Firefox Thunderbird Synchronization Escape

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow an attacker to escape from a isolated software environment...

Cisco ASA Firepower Threat Defense Cryptographic Module DoS

The vulnerability of the cryptographic module of microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to errors in encryption and decryption processes. Exploiting this vulnerability can allow a malicious actor to cause service...

Google Chrome Safe Browsing Bypass

The vulnerability of Google Chrome’s Safe Browsing service is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions through a specially created HTML page...

Zope injection vulnerabilities

Zope is a set of open source object-oriented web application servers written in the Python language by the Zope community. An injection vulnerability exists in Zope AccessControl. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the...

IBM Cloud Pak for Security Security Vulnerabilities

IBM Cloud Pak for Security is an application from IBM USA, Inc. an open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated actions faster.IBM Cloud Pak for Security CP4S is vulnerable to an information disclosure vulnerabili...

Mozilla Firefox Security Advisories (MFSA2021-28, MFSA2021-30) - Windows

This host is missing a security update according to Mozilla. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Advisories (MFSA2021-28, MFSA2021-30) - Mac OS X

This host is missing a security update according to Mozilla. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

ColdFusion Privilege Escalation

The vulnerability of the ColdFusion software platform is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

Business Logic Errors in pimcore/pimcore

✍️ Description Pimcore is vulnerable to Business Logic error through negative products amount. 🕵️‍♂️ Proof of Concept HTML content: HTML 1. Save the above content into an HTML file. 2. Open the HTML file on the browser and click on Submit button. 3. Check out the total price. PoC video. 💥 Impact It...

PT-2021-7430

Name of the Vulnerable Software and Affected Versions Mozilla VPN versions prior to 2.3 Description The issue is related to security configuration errors in Mozilla VPN, which can be exploited by a remote attacker to bypass security restrictions. Multiple low-security issues were discovered and...

IBM i2 Analyze security vulnerabilities

IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with the ability to search, analyze, and store intelligence data. IBM i2 Analyze is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtai...

Cisco Adaptive Security Appliance Software Release 7.0.0 IPsec DoS (cisco-sa-asa-ftd-ipsec-dos-TFKQbgWC)

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...

CVE-2021-29767

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681...

PT-2021-3742 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in creating connections with directories in the Edge Installer component of Microsoft Edge, allowing an attacker to potentially elevate privileges and...