12793 matches found
CVE-2021-43240
NTFS Set Short Name Elevation of Privilege Vulnerability...
CVE-2021-43240
NTFS Set Short Name Elevation of Privilege Vulnerability...
CVE-2021-43240 NTFS Set Short Name Elevation of Privilege Vulnerability
...
CVE-2021-43240
Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.
PT-2021-1521 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to the version that includes the fix for the double free bug in packet set ring Description: A double free bug in the packet set ring function in net/packet/af packet.c can be exploited by a local user through...
PT-2021-22680
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the do ipt get ctl and do ipt set ctl functions in ip tables.c, where uninitialized data can lead to a leak of kernel information. This could result in local information disclosure, requirin...
PT-2021-8133 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a use-after-free issue in the netfilter component of the Linux kernel. This issue can be exploited to potentially elevate privileges in the system. The...
PT-2021-6199
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the NTFS file system of Windows operating systems. It allows an attacker to elevate their privileges. There is no information provided...
PT-2021-27937
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Memcpy-param-overlap. The crash state involves several functions: pdfi set input stream, zPDFstream, and gs...
PT-2021-27943
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow WRITE 1 crash type. The crash state involves functions such as read xref, pdfi read xref, and pdfi set inp...
GHSA-2589-W6XF-983R Cross-site scripting in react-bootstrap-table
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
Prototype polluation in just-safe-set
Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...
GHSA-V26W-GCXH-V4R7 Prototype polluation in just-safe-set
Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution...
fusion-plugin-jwt (>=0.1.0, <=0.1.8), toystore (>=1.1.1, <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (1.1.0)
just-safe-set NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: GHSA-V26W-GCXH-V4R7...
fusion-plugin-jwt (>=0.1.0, <=0.1.8), toystore (>=1.1.1, <=1.5.3) potentially affected by CVE-2021-25952 via just-safe-set (1.1.0)
just-safe-set NPM version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-safe-set and may be impacted: - fusion-plugin-jwt =0.1.0, =1.1.1, =1.5.3 Source cves: CVE-2021-25952 Source advisory: OSV:GHSA-V26W-GCXH-V4R7...
CVE-2021-44148
GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/routercgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name...
OESA-2021-1454 redis6 security update
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
CVE-2021-24914
The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawktosetwidget and tawktoremovewidget AJAX actions, available to any authenticated user. The first one allows low-privileged users including simple subscribers to change the...
Google Android Resource Management Vulnerability
Google Android is a Linux-based open source operating system from Google, Inc. The vulnerability stems from a post-release reuse and out-of-bounds write vulnerability in setClientStateLocked in SurfaceFlinger.cpp. An attacker could exploit the vulnerability to cause a local privilege escalation...