6430 matches found
PYSEC-2021-2
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when webserver exposeconfig is set to False in airflow.cfg. This allowed a privilege escalation attack...
CVE-2021-27138: Undefined Security Weakness
The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT...
CVE-2021-27097: Undefined Security Weakness
The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT...
CVE-2021-26934: Undefined Security Weakness
An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...
Cisco Small Business Router Code Execution
The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
Cisco Smart Software Manager On-Prem Arbitrary Command Execution
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...
Intel Quartus Prime Pro Security Vulnerability
Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A security vulnerability exists in Intel Quartus Prime Pro and Standard edition, which arises from a lack of effectiv...
PT-2021-2028
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the PKU2U authentication protocol in Windows operating systems, specifically concerning access control weaknesses. Exploitation of this issue m...
Owncloud ownCloud 跨站请求伪造漏洞
Owncloud ownCloud is a set of personal cloud storage solutions from the American company ownCloud Owncloud. A cross-site request forgery vulnerability exists in OwnCloud Core, which stems from a WEB application that does not adequately validate whether a request is coming from a trusted user, and...
Cisco SD-WAN vManage Web Interface Command Execution
The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges from a remote location...
Cisco SD-WAN vManage Unauthorized Access
The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
WalletService Privilege Escalation
The vulnerability of the WalletService service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Authentication flaw
HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
CVE-2021-26688
An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 February 2021...
CVE-2020-28450: Undefined Security Weakness
This affects all versions of package decal. The vulnerability is in the extend function...
CVE-2021-26687: Undefined Security Weakness
An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 February 2021...
CVE-2020-28449: Undefined Security Weakness
This affects all versions of package decal. The vulnerability is in the set function...