Design/Logic Flaw

There is an Unquoted Service Path in NI Service Locator nisvcloc.exe in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges...

CVE-2021-42563

CVE-2021-42563 affects NI Service Locator (nisvcloc.exe) on Windows versions prior to 18.0. The vulnerability is an Unquoted Service Path that could let an authorized local user insert arbitrary code and escalate privileges. Impact: local privilege escalation with high impact per the sources. Rem...

CVE-2021-42563

There is an Unquoted Service Path in NI Service Locator nisvcloc.exe in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges...

CVE-2021-42563: Unquoted Search Path or Element

There is an Unquoted Service Path in NI Service Locator nisvcloc.exe in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges...

PT-2021-23629

Name of the Vulnerable Software and Affected Versions NI Service Locator versions prior to 18.0 Description The issue is related to an Unquoted Service Path in nisvcloc.exe, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges on...

PT-2021-8189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the comedi driver, specifically the ni usb6501 component, which lacks proper sanity checks on USB transfer buffer sizes. This can lead to zero-size-pointer...

NIMax 5.3.1f0 Denial Of Service

Exploit Title: NIMax 5.3.1 - 'Remote VISA System' Denial of Service PoC Date: 24/06/2021 Exploit Author: LinxzSec Vulnerability: Local Denial of Service DoS Vendor Homepage: https://www.ni.com/en-gb.html Software Link: License Required -...

Input validation

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-38304

The CVE-2021-38304 entry affects the National Instruments NI-PAL driver (versions 20.0.0 and prior). Root cause: improper input validation; result is local privilege escalation by a user with local access. Impact: privilege escalation, with local attack vector; no user interaction required (per C...

PT-2021-22025

Name of the Vulnerable Software and Affected Versions: National Instruments NI-PAL driver versions 20.0.0 and prior Description: The issue is related to improper input validation in the National Instruments NI-PAL driver, which may allow a privileged user to potentially enable escalation of...

Ni-Pal 输入验证错误漏洞

Ni-Pal is a software component from Ni USA Inc. It is used to provide required functionality for multiple NI drivers. A security vulnerability exists in the NI-PAL driver that stems from a lack of effective privilege licensing and access control measures on a networked system or product...

CVE-2021-38304: Improper Input Validation

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

SUSE: Security Advisory (SUSE-SU-2021:2834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSSL: TLS 1.1 and 1.2 AES-NI Crash (20130205) - Linux

OpenSSL is prone to a denial of service attack. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OpenSSL: TLS 1.1 and 1.2 AES-NI Crash (20130205) - Windows

OpenSSL is prone to a denial of service attack. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2018:0862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RUSTSEC-2021-0060 `aes-soft` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To force the use of a constant-time portable...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +927 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)

aesni CARGO version =0.9.0, =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...

RUSTSEC-2021-0059 `aesni` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To prevent this fallback and have absence of AES-NI...

`aes-soft` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To force the use of a constant-time portable...