CVE-2021-35941

CVE-2021-35941 affects Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions). The issue is an unauthenticated administrator API that can perform a system factory restore, as described in public records and exploited in the wild in June 2021. CVSS metrics (3.1) ind...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Western Digital WD My Book Live 访问控制错误漏洞

Western Digital WD My Book Live is a network storage device from Western Digital. A security vulnerability exists in Western Digital WD My Book Live 2.x and earlier versions and WD My Book Live Duo, which stems from the fact that the products have an administrator API that can be exploited by an...

CVE-2021-35941: Missing Authentication for Critical Function

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

PT-2021-3503

Name of the Vulnerable Software and Affected Versions Western Digital WD My Book Live versions 2.x and later Western Digital WD My Book Live Duo all versions Description The issue is related to deficiencies in the authentication procedure of Western Digital's WD My Book Live and WD My Book Live D...

VulnCheck KEV: CVE-2021-35941

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

Western Digital My Book Live hard drives remotely wiped by hackers

By Habiba Rashid People are shocked to find out all of their data stored on their Western Digital My Book Live hard drives has been wiped out through a factory reset. This is a post from HackRead.com Read the original post: Western Digital My Book Live hard drives remotely wiped by hackers...

MyBook Users Urged to Unplug Devices from Internet

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affect...

My Book Live Users Wake Up to Wiped Devices

If you haven’t already, stop reading and go yank your My Book Live storage device offline, lest you join the ranks of those who woke up on Thursday to find that years of data had been wiped clean on devices around the world. Western Digital’s My Book storage device is designed for consumers and...

World-Class OTT Streaming from MwareTV with Akamai

Since the onset of the pandemic, home entertainment has never been more important. Millions of users across the globe have turned to over-the-top OTT streaming and live TV to bring much-needed diversion and exciting content into their lives...

Tencent Search Live Help has Janus Android Signature Vulnerability

Tencent search live help is professional skills online simply service platform. Tencent search live help exist Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...

Tencent Live suffers from Janus Android signature vulnerability

Tencent Live is a live streaming software. Tencent Live exists Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...

SUSE SLES12: kernel-livepatch-4_12_14-197_86-default / etc (SUSE-SU-2021:2025-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2025-1 advisory. This update for the Linux Kernel 4.12.14-12232 fixes several issues. The following issues were fixed: - CVE-2021-33034: Fixed a...

SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP2) (SUSE-SU-2021:2027-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2027-1 advisory. This update for the Linux Kernel 5.3.18-2464 fixes several issues. The following issues were fixed: - CVE-2021-33200: Enforcing incorrect limit...

SUSE SLES12 Security Update : kernel (Live Patch 38 for SLE 12 SP3) (SUSE-SU-2021:2042-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2042-1 advisory. This update for the Linux Kernel 4.4.180-94141 fixes several issues. The following issues were fixed: - CVE-2021-33034: Fixed a...

SUSE SLES12: kernel-livepatch-4_12_14-150_69-default / etc (SUSE-SU-2021:2060-1)

The remote SUSE Linux SLES12 / SLES15 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2060-1 advisory. This update for the Linux Kernel 4.12.14-15069 fixes several issues. The following security issues were fixed: -...

SUSE: Security Advisory (SUSE-SU-2021:2026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2042-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 9.6, which can be exploited by attackers to conduct denial-of-service attacks...