MiracleLinux 8 : php:7.4 (AXSA:2022-3573:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3573:01 advisory. php: Local privilege escalation via PHP-FPM CVE-2021-21703 php: SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Tenable has extracted the preceding...

CVE-2021-33317

The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an...

CVE-2021-0102

Insecure inherited permissions in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-32742

Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.initbase32Encoded: function opens up the potential for exposing server memory and/or crashing the server Denial of Service for applications where untrusted data can end up in said function. Vapor does not currently...

CVE-2020-14555

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-12926

The Trusted Platform Modules TPM reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device...

CVE-2020-15610

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxphppecl.php. When parsing the modulo parameter, the process does...

CVE-2020-15428

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxcrons.php. When parsing the line parameter, the process does not...

CVE-2020-13515

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause an adversary to obtain elevated privileges. An attacker can send a malicious IRP to trigger this vulnerability...

CVE-2021-33138

creationtimestamp| type| source ---|---|--- 2024-02-23 22:27:13+00:00| seen| https://t.me/ctinow/192231...

SUSE CVE-2021-3556

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Assigned but a duplicate for CVE-2021-3559...

CVE-2021-3602

creationtimestamp| type| source ---|---|--- 2022-03-03 22:26:16+00:00| seen| https://t.me/cibsecurity/38376 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977...

CVE-2021-46251

creationtimestamp| type| source ---|---|--- 2022-02-16 02:34:52+00:00| seen| https://t.me/cibsecurity/37548...

CVE-2021-22806

creationtimestamp| type| source ---|---|--- 2022-02-11 20:28:47+00:00| seen| https://t.me/cibsecurity/37305...

CVE-2021-46097

creationtimestamp| type| source ---|---|--- 2022-01-27 20:20:46+00:00| seen| https://t.me/cibsecurity/36394...

CVE-2021-4133

creationtimestamp| type| source ---|---|--- 2022-01-25 22:18:54+00:00| seen| https://t.me/cibsecurity/36258 2024-01-28 04:57:50+00:00| seen| https://t.me/arpsyndicate/3210...

CVE-2021-40014

creationtimestamp| type| source ---|---|--- 2022-01-10 16:15:07+00:00| seen| https://t.me/cibsecurity/35149...

CVE-2021-39978

creationtimestamp| type| source ---|---|--- 2022-01-04 00:38:42+00:00| seen| https://t.me/cibsecurity/34893...

CVE-2021-43016

creationtimestamp| type| source ---|---|--- 2021-11-22 18:23:40+00:00| seen| https://t.me/cibsecurity/32786...

CVE-2017-7481

creationtimestamp| type| source ---|---|--- 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422...