CVE-2021-23892

By exploiting a time of check to time of use TOCTOU race condition during the Endpoint Security for Linux Threat Prevention and Firewall ENSL TP/FW installation process, a local user can perform a privilege escalation attack to obtain administrator privileges for the purpose of executing arbitrar...

CVE-2021-23892

The CVE-2021-23892 issue affects McAfee Endpoint Security for Linux Threat Prevention and Firewall (ENSL TP/FW). A TOCTOU race condition during the installation process allows a local user to escalate privileges by exploiting insecure use of predictable temporary file locations to gain administra...

CVE-2020-25506

Summary of vulnerability (CVE-2020-25506) : D-Link DNS-320 firmware v2.06B01 Revision Ax is vulnerable to a command-injection in the system_mgr.cgi component. The issue arises because the HTTP parameter f_ntp_server is not sanitized, enabling remote arbitrary command execution. The NUCLEI templat...

CVE-2020-27540

Bash injection vulnerability and bypass of signature verification in Rostelecom CS-C2SHW 5.0.082.1. The camera reads firmware update configuration from SD card file vc\version.json. fw-sign parameter and from this configuration is directly inserted into a bash command. Firmware update is run...

Buffer overflow

Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of immutable schedules in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,...

Authentication flaw

Improper Authentication vulnerability in WAGO 750-8XX series with FW version = FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without authentication This issue affects: WAGO 750-362, WAGO 750-363, WAGO 750-823, WAGO 750-832/xxx-xxx, WAGO...

CVE-2020-12506

CVE-2020-12506 describes an ImpropER Authentication vulnerability in the WAGO 750-8XX series (FW

PT-2020-5817 · Artica · Artica Web Proxy

Name of the Vulnerable Software and Affected Versions: Artica Web Proxy version 4.30.00000000 Description: The issue is related to a lack of protection against SQL structure manipulation in the fw.login.php component. This can be exploited by a remote attacker to bypass privilege detection and ga...

CVE-2020-0221

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

Buffer overflow

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0221

CVE-2020-0221 affects Airbrush’s scratch memory allocator in the Android kernel. The root cause is a numeric overflow in the allocator, which could cause the next allocation to return a pointer within a previously allocated region, enabling improper memory access and elevation of privilege on aff...

CVE-2020-0221

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

SAE IT-systems FW-50 Remote Telemetry Unit Path Traversal Vulnerability

The SAE IT-systems FW-50 Remote Telemetry Unit is a remote terminal unit RTU from SAE IT-systems, Germany. A path traversal vulnerability exists in the SAE IT-systems FW-50 Remote Telemetry Unit. An attacker can exploit this vulnerability with a specially crafted request to view the file structur...

CVE-2020-10634

SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...

CVE-2020-10630

SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...

Design/Logic Flaw

SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...

CVE-2020-10634

SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...

CVE-2020-10634

CVE-2020-10634 affects the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The vulnerability is a Path Traversal (IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY) that could allow a remote attacker to view the device file structure and access restricted files through a specially cra...

CVE-2020-10630

SAE IT-systems FW-50 Remote Telemetry Unit RTU. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users...

CVE-2020-10630

The CVE-2020-10630 entry concerns the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). Technical details from connected sources specify an improper neutralization of input during web page generation (Cross-Site Scripting) in FW-50 RTU, affecting the web server component. Related materials also i...