Unix UOS Desktop Pro x86_64 suffers from a denial of service vulnerability (CNVD-2021-34252)

Unisys UOS Professional Edition is a computer operating system based on the domestic depth system deepin modification. A denial of service vulnerability exists in Unisys UOS Desktop Professional x8664. An attacker can exploit this vulnerability to cause the program to crash...

PT-2021-2858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. It is caused by insufficient file scope limiting,...

GHSA-3C67-GC48-983W Path Traversal in Ansible

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file with...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to execute arbitrary commands on the underlying Linux operating system.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux kernel with root privileges...

KODAK Lookout Converged Video System has Information Leakage Vulnerability

Ltd. is a leading provider of video and security products and solutions. An information leakage vulnerability exists in KODAK Lookout Converged Video System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

Design/Logic Flaw

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This...

vscode-swiftlint code execution vulnerability

vscode-swiftlint is open source an unofficial VS Code extension . Swift styles and conventions can be implemented through SwiftLint . A code execution vulnerability exists in versions prior to vscode-swiftlint 1.4.5, which can be exploited by an attacker to execute arbitrary code on a system...

USN-4801-1 root-system vulnerability

It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code...

Microsoft Windows DNS 安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

CVE-2021-22883

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unabl...

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient input validation, allows attackers to re-record any files in the system.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-record any files in the system remotely...

Google Android 资源管理错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to achieve...

NiuShop Single Merchant V4 Arbitrary File Deletion Vulnerability

NiuShop single merchant V4 system is a PHP open source mall system designed and developed by the mountain Hai Niu Zhi Yun Network Technology Co. NiuShop Single Merchant V4 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete system files...

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system organized by CASAP in the United States. The purpose of the project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient and easily retrievable. A cross-site...

CVE-2021-1335 Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due t...

Google Android heap buffer overflow vulnerability (CNVD-2021-14809)

Google Android is a Linux-based open source operating system developed by Google and the Open Handheld Consortium Google. Google Android 11 suffers from a buffer overflow vulnerability that originates from memory corruption in ksd due to a heap buffer overflow. An attacker can exploit the...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker could exploit this vulnerability to cause a...