23809 matches found
CVE-2021-1901
Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
多款 Lenovo 设备 安全漏洞
Lenovo Desktops and Lenovo ThinkPad are both products of the Chinese company Lenovo.Lenovo Desktops are desktop computersLenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPad is a portable computer.Lenovo Desktops are desktop computers and Lenovo ThinkPa...
openSUSE 15 Security Update : solo (openSUSE-SU-2021:1019-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1019-1 advisory. - The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey...
BIOPASS RAT: New Malware Sniffs Victims via Live Streaming
We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight...
QSAN SANOS and QSAN XEVO Command Injection Vulnerability
QSAN SANOS and QSAN XEVO are both products of QSAN China. QSAN SANOS is a SAN storage management operating system. It comes with a refreshingly easy-to-use Web GUI and can be easily deployed to any infrastructure.QSAN XEVO is a flash data management system. It reduces repetitive tasks and provide...
File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd (CNVD-2021-51387)
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
County-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd. suffers from unauthorized access vulnerability
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
SQL injection vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
Safe addresses can only be added but not removed
Handle 0xRajeev Vulnerability details Impact The addSafeAddress takes an address and adds it to a “safe list". This is used in eoaOnly to give exemption to safe addresses that are trusted smart contracts, when all other smart contacts are prevented from protocol interaction. The stated purpose is...
Flash loan risk mitigation is optional and not robust enough
Handle 0xRajeev Vulnerability details Impact The switchEoaOnly allows the owner to disable preventSmartContracts the project’s plan apparently is to do so after the beta-period which will allow any smart contract to interact with the protocol and potentially exploit any underlying flash loan...
File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
Directory traversal vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.
Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...
July 6, 2021—KB5004946 (OS Build 18363.1646) Out-of-band
None None...
WordPress Flash Games plugin <= 2.2 - Cross-Site Request Forgery (CSRF) Bypass vulnerability
Cross-Site Request Forgery CSRF Bypass vulnerability discovered by WPScanTeam in WordPress Flash Games plugin versions = 2.2. Solution Deactivate and delete. This plugin has been closed as of December 23, 2018 and is not available for download. Reason: Guideline Violation...
Flash Games <= 2.2 - CSRF Bypass
The plugin does not properly check for CSRF in its cgwpsearchgame AJAX action, however we could not identify a risk associated with it...
July 7, 2021—KB5004956 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004954 (Monthly Rollup) Out-of-band
None None...
July 6, 2021—KB5004947 (OS Build 17763.2029) Out-of-band
None None...