Huawei EchoLife HG8045Q vulnerable to OS command injection

Overview EchoLife HT8045Q provided by Huawei is an ONT Optical Network Terminal device. It is equipped with the command line interface for network operators' maintenance purpose, which is disabled by default. When the command line interface is enabled, operators can interact with a certain...

PT-2021-3887 · Blackberry · Blackberry Qnx Os For Medical +2

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform SDP versions 6.5.0SP1 and earlier BlackBerry QNX OS for Medical versions 1.1 and earlier BlackBerry QNX OS for Safety versions 1.0.1 and earlier Description: The issue is related to an integer...

JVN#41646618: Huawei EchoLife HG8045Q vulnerable to OS command injection

EchoLife HT8045Q provided by Huawei is an ONT Optical Network Terminal device. It is equipped with the command line interface for network operators' maintenance purpose, which is disabled by default. When the command line interface is enabled, operators can interact with a certain restricted set ...

PT-2021-4761 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, which can potentially result in arbitrary code execution in the context of the current user. Exploitation...

PT-2021-15281 · Brave +1 · Brave Browser +1

Name of the Vulnerable Software and Affected Versions: Brave Browser Desktop versions prior to 1.28.62 Description: An information disclosure issue exists where logged warning messages include timestamps of connections to V2 onion domains in tor.log. This issue affects versions prior to 1.28.62,...

MGASA-2021-0408 Updated sylpheed and claws-mail packages fix security vulnerability

Updated sylpheed and claws-mail packages fix security vulnerability: The textviewurisecuritycheck function in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click CVE-2021-37746...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2021-20579, CVE-2020-4945, CVE-2021-29777, CVE-2020-4885, CVE-2021-29703)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

Brocade Fabric OS Vulnerability - Lenovo Support US

No description provided...

NVIDIA GeForce Experience - June 2021 - Lenovo Support US

No description provided...

Intel® NUC Pro Chassis Element Driver Advisory

Summary: A potential security vulnerability in some Intel® NUC Pro Chassis Element AverMedia Capture Card drivers may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0160 Description: Uncontroll...

Intel® NUC 9 Extreme Laptop Kits Advisory

Summary: A potential security vulnerability in some Intel® NUC 9 Extreme Laptop Kits may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0196 Description: Improper access control in kernel mode...

OPENSUSE-SU-2021:1112-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode in DjVuText.cpp bsc1187869 This update was imported from the SUSE:SLE-15-SP2:Update update project...

PT-2021-16024 · WordPress · Wp Google Maps

Name of the Vulnerable Software and Affected Versions: WP Google Map WordPress plugin versions prior to 1.7.7 Description: The issue is related to a Stored Cross-Site Scripting problem. It occurs because the Map Title is not properly sanitised or escaped before being outputted on the page. This c...

PT-2021-15267 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat server versions prior to 3.13.2 Rocket.Chat server versions prior to 3.12.4 Rocket.Chat server versions prior to 3.11.4 Description: A sanitization issue exists in the Rocket.Chat server that allows queries to an endpoint,...

SUSE-SU-2021:2634-1 Security update for mariadb

This update for mariadb fixes the following issues: - Update to 10.2.39 bsc1182739 - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. bsc1185870 - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. bsc1185872 - CVE-2021-2180: InnoDB unspecified vulnerability...

CVE-2021-26586

Technical details (affected product versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates and vendor advisories.

HPE Edgeline Infrastructure Management 安全漏洞

HPE Edgeline Infrastructure Management is a software from Hewlett-Packard HPE that is used in data center environments to manage Edge devices. A security vulnerability exists in HPE Edgeline Infrastructure Manager that could be exploited remotely to disclose sensitive information.HPE has provided...

CVE-2021-1572 ConfD CLI Secure Shell Server Privilege Escalation Vulnerability

A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account under which ConfD is running, which is commonly root. To exploit this vulnerability, an attacker must have a valid account on an affected device. The vulnerability exist...

CVE-2021-1572

The CVE-2021-1572 issue affects Cisco ConfD CLI Secure Shell Server Privilege Escalation, impacting ConfD (and NSO/ConfD options) where the built‑in SSH server handles the SFTP service at the privilege level of the running account (often root). An authenticated, local attacker with a valid accoun...

ConfD CLI Secure Shell Server Privilege Escalation Vulnerability

A vulnerability in ConfD could allow an authenticated, local attacker to execute arbitrary commands at the level of the account under which ConfD is running, which is commonly root. To exploit this vulnerability, an attacker must have a valid account on the affected device. The vulnerability exis...