RHEL 7 : kernel-rt (RHSA-2021:0338)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0338 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

CVE-2021-0352

CVE-2021-0352 affects Android (Android-10/Android-11) via memory corruption in the RT regmap driver caused by a type confusion. This can lead to local denial of service with system execution privileges, and exploitation requires no user interaction. The patch referenced is ALPS05453809. The vulne...

CVE-2021-0352

In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05453809...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

Buffer overflow

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

CVE-2020-36109

ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...

CVE-2020-36109

CVE-2020-36109 affects ASUS RT-AX86U (and related models) where firmware below 9.0.0.4_386 has a buffer overflow in the httpd module’s blocking_request.cgi function. The vulnerability can lead to code execution when an attacker crafts malicious input; multiple sources describe this as a potential...

PT-2021-11914 · Asus · Asus Rt-Ax86

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX86U router firmware versions prior to 9.0.0.4 386 Description: The issue is related to a buffer overflow in the blocking request.cgi function of the httpd module. This can cause code execution when an attacker constructs malicious...

ASUS RT-AX86U suffers from a buffer overflow vulnerability

The RT-AX86U is a WiFi6 gaming router. The ASUS RT-AX86U suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a memory corruption that could lead to code execution...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 8 : kernel-rt (RHSA-2021:0136)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0136 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Microsoft Windows Fax Service Security Vulnerability

Microsoft Windows Fax Service is a functional component service from Microsoft Corporation USA. It is used to specify fax settings, including how to send, receive, view, and print. A security vulnerability exists in Microsoft Windows Fax Service. No information about this vulnerability is availab...

Microsoft Windows CSC Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A vulnerability exists in Microsoft Windows CSC Service, and no information is available at this time, please stay tuned to CNNVD or the vendor's announcemen...

Microsoft Windows CryptoAPI Security Vulnerability

Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption, as well as the management of digital certificates in the operating system, as the basis for data encryption and decryption. A...

Microsoft Windows Update Stack Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Windows Update Stack. The following products and editions are affected:Windows Server, version 20H2 Server Core Installation,Windows 10 Version 20H2...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...

Important Photon OS Security Update - PHSA-2021-0182

Updates of 'linux-rt', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Various GE products are vulnerable to trust management issues

GE Grid Solutions Reason RT Clocks RT430 and others are a precision time synchronization unit from General Electric GE. GE Grid Solutions Reason RT Clocks RT430, RT431 & RT434 All firmware versions prior to Version 08A06 contain a security vulnerability that could allow an authenticated, remote...