PT-2021-26954

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.84 Description The issue is related to a use-after-free UAF error in the sata fsl port stop function when the sata fsl module is removed. This error was introduced in version v2.6.24 and fixed in version...

CVE-2021-24863

CVE-2021-24863 affects the WordPress plugin StopBadBots (StopBadBots WordPress plugin) prior to version 6.67. The vulnerability is a SQL injection caused by failure to sanitize and escape the User Agent before using it in a SQL statement to save it. Impact is unauthenticated access leading to dat...

UVI-2021-1002276 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

UVI-2021-1002244 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.218 by commit...

GSD-2021-1002217 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.293 by commit...

PT-2021-26687

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.293 Description: The issue is related to the cfg80211 component, specifically when switching from P2P GO type, where cfg80211 stop ap is not called. This is an automated ID intended to aid in discovery of...

CVE-2021-37850

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

CVE-2021-37850: Undefined Security Weakness

ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot...

Apache Traffic Server Improper Input Validation Vulnerability (CNVD-2021-84824)

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server.An improper input validation vulnerability exists in Apache Traffic Server version 5.0.0-9.1.0 when accepting socket connections. An attacker could exploit this vulnerability to cause the...

October 26, 2021—KB5006745 (OS Build 20348.320) Preview

None None...

CVE-2021-38481

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

Spoofing

The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...

PT-2021-29973

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and attack plausibility have...

PT-2021-30022

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.209 Description The issue is related to the usbhid component, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and potential for attack have not been fully...

PT-2021-30177

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and attack plausibility have...

PT-2021-26182

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and attack plausibility ha...

PT-2021-26056

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and potential for attack hav...

PT-2021-25966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description A potential issue exists in the usbhid component of the Linux Kernel, where raw report buffers are not properly freed in the usbhid stop function. The actual impact and attack plausibility ha...

PT-2021-25998

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue is related to the usbhid module in the Linux Kernel, where raw report buffers are not properly freed in the usbhid stop function. This could potentially lead to a security...

PT-2021-25978

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and attack plausibility have...