CVE-2021-33690

creationtimestamp| type| source ---|---|--- 2021-08-13 13:57:06+00:00| seen| https://t.me/truesecator/2000 2021-09-01 14:28:22+00:00| seen| https://t.me/ptswarm/67 2021-09-06 10:48:25+00:00| seen| https://t.me/truesecator/2071 2021-09-15 22:22:13+00:00| seen| https://t.me/cibsecurity/28941...

Vulnerabilities fixed in Trend Micro Apex One

Trend Micro has fixed vulnerabilities in both the on-premises and SaaS versions of Apex One formerly OfficeScan. The vulnerabilities potentially enable a malicious party to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Bypassing...

Remote code execution

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability

A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it's working to remediate the issue in an upcoming security update. Tracked as CVE-2021-36958 CVSS score: 7.3, the unpatched flaw...

Live555 Resource Management Error Vulnerability

Live555 is a cross-platform C++ open source project that provides solutions for streaming media , it implements the standard streaming media transport protocols such as RTP/RTCP, RTSP, SIP and other support. A security vulnerability exists in Live555, which stems from the affected product's...

Dolphin PHP has a command execution vulnerability

DolphinPHP is an open source PHP rapid development framework based on ThinkPHP5.. DolphinPHP has a command execution vulnerability, which can be exploited to gain access to the server...

Foxit Reader and Foxit PhantomPDF Arbitrary File Write Vulnerability

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An arbitrary file write vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from a failure to validate the CombineFiles pathname and can be...

Windows Print Spooler Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

Critical Vulnerabilities revealed in Microsoft’s Patch Tuesday

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Multiple vulnerabilities have been patched by Microsoft in August 2021 Patch Tuesday. Three of them have been labeled as zero-day vulnerabilities CVE-2021-36936, CVE-2021-36942, and CVE-2021-36948. One of them CVE-2021-36948...

Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability

Microsoft on Tuesday rolled out security updates to address a total of 44 security issues affecting its software products and services, one of which it says is an actively exploited zero-day in the wild. The update, which is the smallest release since December 2019, squashes seven Critical and 37...

ZOHO ManageEngine ADSelfService Plus CSV Injection Vulnerability

ZOHO ManageEngine ADSelfService Plus is a web-based end-user password management software from ZOHO, Inc. A CSV injection vulnerability exists in ZOHO ManageEngine ADSelfService Plus, which can be exploited by attackers to obtain a reverse shell...

Siemens Jt2go and Siemens Teamcenter Visualization Out-of-Bounds Read Vulnerability (CNVD-2021-61121)

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. A security vulnerability exists in Siemens Jt2go and Siemens Teamcenter Visualization, which stems from the lack of proper validation of...

Mozilla Rust has an unspecified vulnerability (CNVD-2021-61409)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability in ark-r1cs-std crate in Mozilla Rust before 0.3.1, which stems from FieldVar:: the mulbyinverse method does not enforce any constraints and can be exploited by an attacker to launch...

Mozilla Rust Denial of Service Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A denial of service exists in Mozilla Rus, which can be exploited by attackers to cause a denial of service...

Linux kernel information disclosure vulnerability (CNVD-2021-60524)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel has a security vulnerability that could be exploited by an attacker to obtain any information changed in the network namespace and use this information to launch further attacks on the...

Mozilla Rust Denial of Service Vulnerability (CNVD-2021-61404)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A denial-of-service vulnerability exists in max7301 crate in versions of Mozilla Rust prior to 0.2.0, which can be exploited by attackers to cause data contention by sending specially crafted requests...

NVIDIA Bootloader Buffer Overflow Vulnerability

NVIDIA Bootloader is a bootloader component from Nvidia Corporation. NVIDIA Bootloader is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause information disclosure, data integrity, and information disclosure restrictions across all components...

CVE-2021-22919

A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway, and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk...

Design/Logic Flaw

A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway, and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk...

Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerability (CNVD-2021-62976)

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...