CVE-2021-31001

According to the sources, CVE-2021-31001 is an access issue in iOS/iPadOS Telephony that could allow an attacker in a privileged network position to leak sensitive user information. The vulnerability is addressed in iOS 15 and iPadOS 15. Connected documents (Red Hat, PT Security, CNNVD, etc.) con...

CVE-2021-30910

Technical details for CVE-2021-30910 are not publicly available in the provided documents. Monitor for updates from the connected sources.

CVE-2021-22248

Removed by vendor...

CVE-2021-29704

IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

How Vodafone Global Security Director creates an inclusive and secure workplace

Moving to more flexible remote work policies has caused telecommunications giant Vodafone to rethink cybersecurity and the potential friction to users. Instead of relying on physical security controls in the office, the company has embraced a Zero Trust strategy that requires authenticating...

CVE-2020-18771

Exiv2 0.27.99.0 is affected by a global buffer over-read in Nikon1MakerNote::print0x0088 (nikonmn_int.cpp), enabling information leakage. The CVE is CVE-2020-18771. Connected advisories confirm this vulnerability exists in Exiv2 and have prompted remediation discussions. Affected software: Exiv2 ...

Design/Logic Flaw

Adobe Media Encoder version 15.2 and earlier is affected by an uninitialized pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of thi...

Arbitrary file deletion

An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file...

CVE-2020-18878

CVE-2020-18878 describes a directory traversal vulnerability in Skycaiji v1.3. The flaw arises in the component referenced by the URL parameter sequence index.php?m=admin&c=Tool&a=log&file=... which can allow remote attackers to read files outside the web root, exposing sensitive information. Aff...

CVE-2013-0344

CVE-2013-0344 entry is rejected/not used and does not represent an active vulnerability.

CVE-2013-1837

...

CVE-2021-21868

creationtimestamp| type| source ---|---|--- 2021-08-18 18:17:11+00:00| seen| https://t.me/cibsecurity/27533 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

Design/Logic Flaw

In onResume of VoicemailSettingsFragment.java, there is a possible way to retrieve a trackable identifier without permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2021-32072

The CVE-2021-32072 entry concerns Mitel MiCollab: the MiCollab Client Service component in MiCollab prior to version 9.3 has an information disclosure flaw due to insufficient output sanitization, allowing an attacker to view source code methods. Connected documents confirm the affected product a...

CVE-2021-37703

Discourse information exposure CVE-2021-37703 affects Discourse before versions 2.7.8 and 2.8.0.beta5, where a user’s read state for a topic (e.g., last read post number and notification level) is exposed. Consequence: potential disclosure of read-state data. Remediation: upgrade to patched relea...

Weak password vulnerability in SRG3260 of Huawei Technologies Co.

Huawei Technologies Co., Ltd. is a leading global information and communications technology ICT solutions provider specializing in ICT. A weak password vulnerability exists in Huawei Technologies SRG3260, which can be exploited by attackers to obtain sensitive information...

CVE-2021-37681

CVE-2021-37681 affects TensorFlow (SVDF in TFLite); root cause is a potential null dereference where GetVariableInput can return nullptr and GetTensorData assumes a valid tensor. A fix was committed (5b048e87e4e55990dae6b547add4dae59f4e1c76) and will be included in TensorFlow 2.6.0, with cherry-p...

CVE-2021-38593

CVE-2021-38593: IBM Cloud Pak for Business Automation infrastructure (Cloud Pak foundational services) lists this Qt vulnerability among its affected components. The CVE originally describes an out-of-bounds write in Qt 5.x/6.x involving QOutlineMapper::convertPath. IBM bulletins indicate remedia...

CVE-2021-38544

The CVE-2021-38544 entry concerns Sony SRS-XB33 and SRS-XB43 speakers. Reported as a Glowworm/firefly-style attack, remote attackers can recover spoken audio by analyzing LED power indicator emissions with an electro-optical sensor; the LED is tied to the power line so LED brightness correlates w...

CVE-2021-38546

The CVE-2021-38546 entry covers Creative Pebble devices affected by a Glowworm-style attack. According to redhat and NVD records, remote attackers can recover spoken audio by measuring power-indicator LED emissions with an electro-optical sensor and telescope. The underlying issue links LED outpu...