Design/Logic Flaw

Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data...

PT-2021-7046 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no information about...

PT-2021-7045 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

PT-2021-3008 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings of the SMB Client component in Microsoft Windows operating systems. It allows a remote attacker to gain unauthorized access to protected...

Secure unmanaged devices with Microsoft Defender for Endpoint now

As we have entered into new hybrid work environments, businesses need to think about how they will proactively protect their organizations from the influx of new or “bring your own” BYO connected devices. This new normal has exposed the most challenging cybersecurity landscape we’ve ever...

PT-2021-2637 · Microsoft · Windows Wlan Autoconfig Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions prior to the fixed version Description: The issue is related to errors in security settings of the Windows WLAN service, allowing an attacker to gain unauthorized access to protected information. This...

PT-2021-2691 · Microsoft · Azure Ad +1

Name of the Vulnerable Software and Affected Versions: Azure AD affected versions not specified Description: The issue is related to errors in security settings of the Microsoft Azure Active Directory cloud platform, which can be exploited to impact the confidentiality, integrity, and availabilit...

PT-2021-2384 · Microsoft · Windows Admin Center

Name of the Vulnerable Software and Affected Versions: Windows Admin Center affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. Recommendations: At the moment, there is no informatio...

PT-2021-2280 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Visio affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can affect the system, but specific details about the...

PT-2021-2044 · Microsoft · Microsoft.Powershell.Utility +1

Name of the Vulnerable Software and Affected Versions: Microsoft.PowerShell.Utility Module affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing protection mechanisms. This security-feature bypass...

CentOS 8 : postgresql:10 (CESA-2020:5567)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5567 advisory. - postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 - postgresql: Multiple features escape security restricted operati...

RHEL 8 : postgresql:10 (RHSA-2021:0161)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0161 advisory. PostgreSQL is an advanced object-relational database management system DBMS. The following packages have been upgraded to a later upstream...

CVE-2021-21261

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...

CVE-2021-21261

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...

PT-2021-1592 · Microsoft · Windows Remote Desktop +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop affected versions not specified Description: The issue is related to errors in security settings of the Remote Desktop Services RDS in Windows operating systems. It may allow a remote attacker to impact the...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

CVE-2020-35800

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2...

Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, CBK40 before 2.5.0.10, CBR40 before 2.5.0.10, D6000 before 1.0.0.80, D6220 before 1.0.0.60, D6400 before 1.0.0.94, D7000v2...

CVE-2020-35801

Affected devices: NETGEAR ProSAFE switches JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2 (pre-2.6.0.48). Description: incorrect configuration of security settings leaves a TFTP server active by default, allowing remote authenticated users to update the switch firmware. Impact: potential unauthorize...