13550 matches found
PT-2021-2070 · Microsoft · Skype For Business Server
Name of the Vulnerable Software and Affected Versions: Skype for Business Server Microsoft Lync Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks...
PT-2021-2092
Name of the Vulnerable Software and Affected Versions: Intel EPID SDK versions prior to 8 Description: The issue is related to improper input validation and errors in privilege management. It may allow an authenticated user to potentially enable an escalation of privilege via local access...
PT-2021-2054 · Microsoft · Windows Trust Verification Api +1
Name of the Vulnerable Software and Affected Versions: Windows Trust Verification API affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Trust Verification API, which is caused by resource release errors. This vulnerability can be...
PT-2021-2026 · Microsoft · Windows Fax Service +1
Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Windows Fax Service, which is associated with privilege management errors. This allows a remote attacker to...
PT-2021-2949 · Adobe · Magento
Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to an insecure direct object reference IDOR in the product module, which could lead to unauthorized...
MySQL InnoDB Privilege Escalation
The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failures or gain privileged access through network packets...
Cisco SD-WAN DoS
The vulnerability of the IPSec tunnel of Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to errors in processing IP packets passing through...
[SECURITY] [DLA 2550-1] openjpeg2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2550-1 [email protected] https://www.debian.org/lts/security/ Brian May February 09, 2021 https://wiki.debian.org/LTS -...
wildfly: resource adapter logs plaintext JMS password at warning level on connection error
A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...
Cisco Data Center Network Manager Data Compromise
The vulnerability of the Data Center Network Manager DCNM of the Cisco Data Center Network system is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
Cisco Unified Communications Manager Unauthorized Access
The vulnerability of the Cisco Unified Communications Manager IM & Presence Service web interface is related to input validation errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Cisco SD-WAN vManage Web Interface Data Compromise
The vulnerability in the vManage web interface of the Cisco SD-WAN software-defined network is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...
MySQL Server Optimizer Privilege Escalation
The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain privileged access through network packets...
MySQL Server DoS
The vulnerability of the MySQL Server component, which is part of the database management system, is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...
CVE-2021-3229
Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...
CVE-2021-3229
Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...
OESA-2021-1007 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
ASUSWRT ASUS RT-AX3000 security vulnerabilities
ASUS RT-AX3000 is a firmware from ASUS Taiwan, China that runs in its routers.A security vulnerability exists in ASUS RT-AX3000 that could be exploited by an attacker to interrupt the use of the device's installation services via a continuous login error...
CVE-2021-21607
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors...
MGASA-2021-0065 Updated firefox packages fix security vulnerabilities
When a HTTPS page was embedded in a HTTP page, and there was a service worker registered for the former, the service worker could have intercepted the request for the secure page despite the iframe not being a secure context due to the insecure framing CVE-2020-26976. If a user clicked into a...