PT-2021-18017

Name of the Vulnerable Software and Affected Versions: Genexis PLATINUM 4410 version 2.1 P4410-V2-1.28 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters to "sys config valid.xgi", as demonstrated by the "sys config valid.xgi?exeshell=telnetd &" URI...

CVE-2021-28685

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process and to interact with MSR registers. This cou...

CVE-2021-28685: Undefined Security Weakness

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process and to interact with MSR registers. This cou...

CVE-2021-28686: Out-of-bounds Write

AsIO264.sys and AsIO232.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl...

PT-2021-17905

Name of the Vulnerable Software and Affected Versions: ASUS GPUTweak II versions prior to 2.3.0.3 Description: The issue allows low-privileged users to interact directly with physical memory by calling certain driver routines that map physical memory into the virtual address space of the calling...

PT-2021-17906

Name of the Vulnerable Software and Affected Versions: ASUS GPUTweak II versions prior to 2.3.0.3 Description: The issue allows low-privileged users to trigger a stack-based buffer overflow in AsIO2 64.sys and AsIO2 32.sys. This could enable low-privileged users to achieve Denial of Service via a...

Buffer overflow

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2021-27697

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2021-27697

The connected records confirm a buffer overflow in RIOT-OS 2021.01, specifically in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c via gnrc_rpl_validation_options(). This is the documented root cause and function/file implicated across Red Hat, CNVD, NVD, and related sources. The CVE entry relate...

CVE-2021-27697: Buffer Copy without Checking Size of Input

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

PT-2021-17411

Name of the Vulnerable Software and Affected Versions RIOT-OS version 2020.01 Description The issue is related to a buffer overflow in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations For RIOT-OS version 2020.01, consider applying a patch to fix the buffer overflow...

virt:rhel and virt-devel:rhel security update

An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2021-4225

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12 Description An out-of-bounds memory write flaw was found in the list devices function in the Multi-device driver module. This flaw allows an attacker with special user privilege, specifically CAP SYS ADMIN, ...

PT-2021-11022

Name of the Vulnerable Software and Affected Versions: Portainer versions 1.24.1 and earlier Description: The issue is related to insecure permissions, potentially leading to remote arbitrary code execution. A non-admin user can spawn new containers with critical capabilities, such as SYS MODULE,...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

Buffer overflow

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

CVE-2021-27965

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request...

CVE-2021-27965

The CVE-2021-27965 issue affects the MsIo64.sys driver in MSI Dragon Center prior to version 2.0.98.0, where a stack/buffer overflow in IOCTL handlers (0x80102040, 0x80102044, 0x80102050, 0x80102054) enables privilege escalation. The vulnerability is tied to the driver before 1.1.19.1016 and can ...