The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their security vulnerabilities related to data protection, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to deficiencies in data protection. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the webSetEMailAlert function in the embedded web server, due to insufficient validation of input data, allows a malicious user to elevate their privileges and execute system commands of the operating system.

The vulnerability of the webSetEMailAlert function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute system commands of the operating system...

The vulnerability of the MtcSetDataItemt function in the embedded web server, due to insufficient validation of input data, allows attackers to escalate their privileges and execute system commands of the operating system.

The vulnerability of the MtcSetDataItemt function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute system commands of the operating system...

Details Disclosed On Critical Flaws Affecting Nagios IT Monitoring Software

Cybersecurity researchers disclosed details about 13 vulnerabilities in the Nagios network monitoring application that could be abused by an adversary to hijack the infrastructure without any operator intervention. "In a telco setting, where a telco is monitoring thousands of sites, if a customer...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

The vulnerability of the “forward first” DNS server mode in Bind9, which allows a attacker to cause a service failure.

The “forward first” mode of the Bind9 DNS server has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme allows a hacker to trigger a service failure.

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning mechanism is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the Microsoft .NET Framework software platform and the Microsoft Visual Studio development tools is related to deficiencies in access control, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft .NET Framework software platform and the Microsoft Visual Studio development tools is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the MySQL...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

CVE-2021-1552

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

USN-4945-2 linux-raspi, linux-raspi-5.4 vulnerabilities

USN-4945-1 fixed vulnerabilities in the Linux kernel for Ubuntu 20.04 LTS and Ubuntu 18.04 LTS. This update provides the corresponding Linux kernel updates targeted specifically for Raspberry Pi devices in those same Ubuntu Releases. Original advisory details: It was discovered that the Nouveau G...

There are logic flaws and vulnerabilities in the IoT smart water meter supervisory platform of Shandong KD Electronics Co.

Ltd. is a national high-tech enterprise and national high-tech zone gazelle enterprise integrating product development, production, sales and teaching practice. There is a logic flaw vulnerability in the Internet of Things IoT Smart Water Meter Supervision Platform of Shandong KDE Electronics Co...

COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass) Vulnerability

Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection Auth Bypass Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10 SQL Injection:...

The vulnerability of the Endeca sub-component of the Oracle Purchasing component of the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Endeca sub-component of the Oracle Purchasing component of the Oracle E-Business Suite is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

USN-4957-2 djvulibre vulnerabilities

USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a...

CVE-2021-32402

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

CVE-2021-32402

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

Oracle Java SE Security Update (apr2021) - Windows

Oracle Java SE is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...