CVE-2021-0444

In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8...

Description of the security update for SharePoint Enterprise Server 2016: April 13, 2021 (KB4504719)

None None...

[SECURITY] Fedora 34 Update: qqc2-breeze-style-5.21.3-1.fc34

This is a pure Qt Quick/Kirigami Qt Quick Controls style...

Description of the security update for SharePoint Server 2019: March 9, 2021 (KB4493230)

None None...

Quanta PDF Quick View has a memory corruption vulnerability

PDF Quick View is a PDF drawing viewing software. A memory corruption vulnerability exists in Quanta PDF Quick Look. An attacker could exploit this vulnerability to cause the program to crash...

CVE-2021-25333

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code...

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

CVE-2021-22128

The CVE-2021-22128 entry applies to FortiProxy SSL VPN portal, affecting versions 2.0.0 and 1.2.9 and below. The flaw is described as an improper access control that could let an authenticated, remote attacker access internal services, such as the ZebOS Shell, via the Quick Connection functionali...

Samsung Pay mini 信息泄露漏洞

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. An information disclosure vulnerability exists in the Samsung Pay mini application prior to v4.0.14, which allows unauthorized users to access balance information by scanning a specific QR co...

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1527)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw...

FortiProxy SSL-VPN Improper Access Control vulnerability through the Quick connection functionality

...

Binary Vulnerability in Quick Controls Configuration Software

QuickControl Configuration Software is a monitoring software used in industrial power and other fields. A binary vulnerability exists in Quick Control Configuration Software. An attacker can exploit the vulnerability by sending constructed data that will cause the operating environment to crash a...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. The e1000 of QEMU has a security vulnerability that can be exploited by attackers to trigger a denial of service...

CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

Code injection

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

CVE-2020-12702

Weak encryption in the Quick Pairing mode in the eWeLink mobile application Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during th...

CVE-2020-12702

CVE-2020-12702 concerns weak encryption in the Quick Pairing mode of the eWeLink mobile app (Android v4.9.2 and earlier; iOS v4.9.1 and earlier). The root cause is insufficient protection during the pairing process, enabling physically proximate attackers to eavesdrop on Wi‑Fi credentials and oth...

GNU C Library和glibc 资源管理错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A resource management error vulnerability exists in qemu 5.2.0-2, which can be exploited by an attacker to cause a denial of service situation ...