CVE-2021-21556

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Servic...

Stack overflow

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Servic...

Heap overflow

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service...

CVE-2021-21555

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service...

CVE-2021-21556

CVE-2021-21556 affects Dell PowerEdge BIOS/UEFI on R640/R740/R740XD/R840/R940/R940xa/MX740c/MX840c/T640 with NVDIMM-N. A stack-based buffer overflow in the BIOS Preboot Environment could allow a local high-privilege attacker to cause denial of service, execute arbitrary code, or disclose informat...

CVE-2021-21556

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Servic...

CVE-2021-21555

CVE-2021-21555 affects Dell PowerEdge server BIOS on R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 with NVDIMM-N. Root cause: heap-based buffer overflow in BIOS/UEFI Preboot Environment. Local privileged users could cause denial of service, arbitrary code execution, or informat...

n+otes 1.6.2 - Denial of Service Exploit

Exploit Title: n+otes 1.6.2 - Denial of Service PoC Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/n-otes/id596895960 Version: 1.6.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being used when creating a note:...

Fast, Effective N-grams Extraction and Analysis with SQL

Features extraction is expensive, especially when dealing with big data. That’s why it’s great when you have the ability to preprocess close to the database - the data stays in the DB and doesn’t have to move out, unless necessary. One common approach for text data representation is N-grams...

openSUSE Security Update : monitoring-plugins-smart (openSUSE-2021-706)

This update for monitoring-plugins-smart fixes the following issues : monitoring-plugins-smart was updated to 6.9.1 : This is a security-release boo1183057 + Fixes the regular expression for pseudo-devices under the /dev/bus/N path. from 6.9.0 + Allows using PCI device paths as device names 64 +...

PYSEC-2021-179

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

PYSEC-2021-469

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

CODESYS Group CODESYS Automation Server 跨站请求伪造漏洞

CODESYS Group CODESYS Automation Server is an application from the German company CODESYS Group. It is used to manage control tasks. A cross-site request forgery vulnerability exists in CODESYS Group CODESYS Automation Server versions prior to 1.16.0. No detailed vulnerability details are current...

openSUSE: Security Advisory for nodejs10 (openSUSE-SU-2021:0082-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Command Execution Vulnerability in N-Speed Gigabit Multi-Network Wireless Broadband Sharer

Founded in 2006 in Tainan, Sapido is a brand name of internet communication products and IoT that has obtained the Taiwan Manufacturing Smile Seal. A command execution vulnerability exists in the N-Speed Gigabit Multi-Network Wireless Broadband Sharer, which can be exploited by an attacker to gai...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

Authentication flaw

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

Design/Logic Flaw

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28936

The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...

CVE-2021-28936

The CVE-2021-28936 entry covers Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1). The vulnerability allows changing the Web management administrator password via a specially crafted HTTP GET request, without prior authentication, with the administrator username typically known as admin. This i...