1621 matches found
CVE-2021-23243: Undefined Security Weakness
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used...
Security Weakness Resulting in Potential Local Privilege Escalation When HA (High Availability) is Active
A weakness in the SMA100 Series exists when High Availability HA pair is active, potentially permitting an operation at a privilege's level that is higher than the minimum level required. If a malicious actor obtains a 'nobody' user shell on an impacted SMA100 device, this can potentially lead to...
High-Severity RCE Flaw Disclosed in Several Netgear Router Models
Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Traced as CVE-2021-40847 CVSS score: 8.1, the security weakness...
golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet
A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...
CVE-2021-41382: Undefined Security Weakness
Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...
CVE-2021-41326: Undefined Security Weakness
In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shellexec call...
CVE-2021-30690: Undefined Security Weakness
Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache...
CVE-2021-40540: Undefined Security Weakness
ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...
CVE-2021-40532: Undefined Security Weakness
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension...
CVE-2021-30618: Undefined Security Weakness
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools...
CVE-2021-40147: Undefined Security Weakness
EmTec ZOC before 8.02.2 allows \e201 pastes, a different vulnerability than CVE-2021-32198...
Booster for WooCommerce < 5.4.4 - Authentication Bypass
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink function found in the...
CVE-2021-30938: Undefined Security Weakness
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A local user may be able to cause unexpected system termination or read kernel memory...
CVE-2021-31009: Undefined Security Weakness
Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5...
CVE-2021-23432: Undefined Security Weakness
This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge...
CVE-2021-38531: Undefined Security Weakness
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...
CVE-2021-38586: Undefined Security Weakness
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2020-36472: Undefined Security Weakness
An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander types that they contain...
CVE-2020-36469: Undefined Security Weakness
An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implemented unconditionally...