CVE-2021-33572

CVE-2021-33572 is a DoS vulnerability in the FSAVD component of F-Secure Linux Security. The FSAVD process can crash when scanning larger packages or fuzzed files, with a remote attacker able to trigger the issue and cause DoS of the Anti-Virus engine. The provided sources do not specify affected...

CVE-2021-33572: NULL Pointer Dereference

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

PT-2021-20209

Name of the Vulnerable Software and Affected Versions F-Secure Linux Security affected versions not specified Description A Denial-of-Service DoS issue was found in the FSAVD component, which can crash when scanning larger or fuzzed files. This can be triggered remotely, resulting in a...

PT-2021-28300

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the mrb str format function, called by mrb f sprintf and mrb vm exec...

F-Secure antivirus 代码问题漏洞

F-secure F-Secure Anti-Virus is a suite of antivirus software from the Finnish company F-Secure F-secure. The software integrates several virus monitoring engines for real-time virus scanning of the operating system and provides powerful background management features. A security vulnerability...

VulnCheck KEV: CVE-2021-22986

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services...

CVE-2020-21054

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...

CVE-2020-21054

FusionPBX 4.5.7 contains a Cross-Site Scripting (XSS) vulnerability exploitable via an unsanitized variable f in app/vars/vars_textarea.php. Affects multiple CVE mirrors (CVE-2020-21054) with consistent description across NVD, Red Hat, CNVD and other feeds. Impact is to inject arbitrary web scrip...

CVE-2020-21054

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...

CVE-2020-21054: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\varstextarea.php...

PT-2021-10577

Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7 Description: A Cross Site Scripting XSS issue allows remote malicious users to inject arbitrary web script or HTML via an unsanitized f variable in the appvarsvars textarea.php file. This enables attackers to execute...

NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery Vulnerability

NiceHash Miner Excavator versions 1.6.7c and below suffer from a cross site request forgery vulnerability. The issue enables any external web site to send commands to the local miner instance, and to redirect the mined coins to an arbitrary mining address. NiceHash Miner Excavator API Cross-Site...

NiceHash Miner Excavator 1.6.7c Cross Site Request Forgery

NiceHash Miner Excavator API Cross-Site Request Forgery ======================================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/nicehash-miner-excavator-api-csrf.txt Overview -------- NiceHash Miner Excavator plugin contains a...

PT-2021-10304

Name of the Vulnerable Software and Affected Versions: PHPOK version 5.2.060 Description: A Cross Site Request Forgery CSRF issue exists, which could allow a remote malicious user to execute arbitrary code via the "admin.php?c=admin&f=save" API endpoint, specifically through the c and f parameter...

CVE-2020-19199: Cross-Site Request Forgery (CSRF)

A Cross Site Request Forgery CSRF vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code...

CVE-2020-28016

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

CVE-2020-28016: Out-of-bounds Write

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

Cisco Hosted Collaboration Mediation Fulfillment Denial of Service Vulnerability

A vulnerability in the Java Management Extensions JMX component of Cisco Hosted Collaboration Mediation Fulfillment HCM-F could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An...

Privilege escalation

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

CVE-2021-28271: Incorrect Default Permissions

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...