43043 matches found
February 16, 2021—KB4601380 (OS Build 18363.1411) Preview
None None...
PT-2021-17339
Name of the Vulnerable Software and Affected Versions: Pelco Digital Sentry Server version 7.18.72.11464 Description: The issue is related to a stack-based buffer overflow in the SetCameraConnectionParameter of the RTSPLive555.dll ActiveX control. This can be exploited by a remote attacker to...
CVE-2021-27232: Out-of-bounds Write
The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...
The vulnerability of the IPv6 traffic processing services in Cisco IOS XR and Cisco NX-OS systems allows attackers to enhance their privileges.
The vulnerability of the IPv6 traffic processing service in Cisco IOS XR and Cisco NX-OS lies in errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to the use of memory after it is released. This allows attackers to bypass security restrictions and execute arbitrary code.
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to bypass security...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
NEC Calsos CSDJ Authorization Issues Vulnerability
NEC Calsos CSDJ is a monitoring device from NEC Corporation of Japan. It provides IoT-enabled remote monitoring systems in various industries such as water and wastewater, manufacturing and agriculture. An authorization issue vulnerability exists in Calsos CSDJ that stems from a lack of...
OpenZFS Security Vulnerability
A security vulnerability exists in OpenZFS through 2.0.3 that stems from an IPv6 address data resolution failure when an NFS share is exported to an IPv6 address via sharefs, but is accessible to everyone...
Multiple Embedded TCP/IP Security Feature Issue Vulnerability
Multiple Embedded TCP/IP is a highly efficient embedded stack developed using a verifiable process and in strict compliance with the MISRA coding standard. Multiple Embedded TCP/IP suffers from a security signature issue vulnerability that can be exploited by an attacker to spoof or interrupt TCP...
Multiple Embedded TCP/IP Security Feature Issue Vulnerability
Multiple Embedded TCP/IP is a highly efficient embedded stack developed using a verifiable process and in strict compliance with the MISRA coding standard. Multiple Embedded TCP/IP suffers from a security signature issue vulnerability that can be exploited by attackers to spoof or corrupt TCP...
Oryx Embedded CycloneTCP ISN Security Feature Issue Vulnerability
Oryx Embedded CycloneTCP ISN is an application from Oryx Embedded, France. It provides a dual IPv4,IPv6 stack for embedded applications. CycloneTCP ISN suffers from a security signature issue vulnerability that could allow an attacker to spoof or corrupt a TCP connection...
Verify Your Valentine
This Valentine’s Day, before you go looking for love in all the wrong chat rooms, CISA reminds users to be wary of internet romance scams. At first, cyber criminals promise the reward of romance after adopting an alias to appear as a potential partner. Once your heart is hooked on hope, they turn...
CVE-2021-27161
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP...
CVE-2021-27170
An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet...
CVE-2021-27163
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP...
CVE-2021-27153
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP...
CVE-2021-27149
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / z6dUABtl270qRxt7a2uGTiw credentials for an ISP...
CVE-2021-27145
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP...