4000 matches found
CVE-2020-24587
CVE-2020-24587 is referenced in the Amazon Linux 2 kernel advisory for Kernel-5.10-2022-002. The connected document confirms a flaw in the Linux kernel 802.11 wifi fragmentation handling where fragments encrypted under different keys can be reassembled and decrypted, enabling an attacker within w...
CVE-2020-23575
Kyocera Printer d-COPIA253MF plus is affected by a directory-traversal vulnerability described in CVE-2020-23575. The issue allows an attacker to retrieve or view arbitrary files from the affected server via directory traversal. Connected sources (Kyocera/Nuclei template) confirm this affects Kyo...
CVE-2021-32471
CVE-2021-32471 concerns the Marvin Minsky 1967 Universal Turing Machine implementation, where insufficient input validation in the program allows a user to execute arbitrary code via crafted data. The described scenario notes that, after processing input composed of As and Bs (rather than 0s and ...
CVE-2021-28664
CVE-2021-28664 concerns the Arm Mali GPU kernel driver, enabling privilege escalation or memory corruption (unprivileged user can write to read-only memory). Affected GPU families and revisions: Bifrost r0p0–r29p0 (before r30p0), Valhall r19p0–r29p0 (before r30p0), and Midgard r8p0–r30p0 (before ...
CVE-2021-28663
CVE-2021-28663 is an Arm Mali GPU kernel-driver use-after-free memory corruption vulnerability that can enable privilege escalation or information disclosure. Affected GPUs span Bifrost (r0p0–r28p0 before r29p0), Valhall (r19p0–r28p0 before r29p0), and Midgard (r4p0–r30p0). The issue arises from ...
CVE-2021-31755
CVE-2021-31755 : Tenda AC11 routers (firmware up to 02.03.01.104_CN) are affected by a stack buffer overflow in /goform/setmac that can be triggered via a crafted POST request to execute arbitrary code. This is described as a remote, unauthenticated condition with high impact. Connected sources c...
CVE-2021-1905
CVE-2021-1905 is a memory-management vulnerability (use-after-free) in Qualcomm Snapdragon chipsets caused by improper handling of memory mapping across multiple processes. Affects a broad range of Snapdragon products (Auto, Compute, Connectivity, IoT, Mobile, Wearables, etc.). The CVE is charact...
CVE-2021-1906
CVE-2021-1906 affects Qualcomm Snapdragon GPU address management across Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Wearables. Root cause: improper handling of address deregistration on failure can lead to a new GPU address allocation failure. CVSS reflects Medium seve...
CVE-2021-29203
CVE-2021-29203 affects HPE Edgeline Infrastructure Manager prior to version 1.22. The connected Nuclei template documents an authentication bypass vulnerability that could be remotely exploited to bypass remote authentication, potentially allowing execution of arbitrary commands, gaining privileg...
CVE-2021-28149
CVE-2021-28149 (Hongdian H8922 3.0.5) is a local file inclusion vulnerability in the device’s /log_download.cgi log export handler. The issue arises because user input is not validated, allowing a remote attacker with minimal privileges to download arbitrary files from the device by substituting ...
CVE-2021-28150
CVE-2021-28150 affects Hongdian H8922 3.0.5. The NVD and related sources describe an information-disclosure flaw where an unprivileged guest can read cli.conf (containing the administrator password and other sensitive data) via /backup2.cgi. The issue is triggered by accessing backup2.cgi, enabli...
CVE-2021-28151
Hongdian H8922 3.0.5 devices are vulnerable to remote command injection in tools.cgi ping via shell metacharacters in the ip-address (Destination) field, accessible with guest/guest credentials. The Nuclei template and other sources confirm that an attacker can execute arbitrary commands on the d...
CVE-2021-32030
CVE-2021-32030 affects ASUS GT-AC2900 routers (and Lyra Mini) with firmware versions before 3.0.0.4.386.42643 (Lyra Mini before 3.0.0.4_384_46630). The vulnerability enables an authentication bypass by processing remote input from an unauthenticated user, yielding unauthorized access to the admin...
CVE-2021-1498
Cisco HyperFlex HX Data Platform contains unauthenticated command injection vulnerabilities in its web-based management interface that could allow a remote attacker to execute arbitrary commands on the affected device. Evidence from multiple sources identifies CVE-2021-1498 as a remote command ex...
CVE-2021-1497
Cisco HyperFlex HX Data Platform (Cisco HyperFlex HX) contains CVE-2021-1497: multiple vulnerabilities in the web-based management interface that allow an unauthenticated remote attacker to perform command injection against the device. Affected product/version per public advisories: Cisco HyperFl...
CVE-2020-28015
Exim 4 before 4.94.2 is affected by CVE-2020-28015 due to Improper Neutralization of Line Delimiters. A local attacker can abuse newline characters in recipient addresses to alter the behavior of root processes. Affected product: Exim (MTA). Root cause: newline handling in recipient address enabl...
CVE-2021-21551
CVE-2021-21551 relates to the Dell dbutil_2_3.sys driver, with an insufficient access control vulnerability that enables local privilege escalation, DoS, or information disclosure for a locally authenticated user. Connected PoCs and analyses describe an IOCTL-driven path that allows arbitrary ker...
CVE-2020-21551
CVE-2020-21551 is placeholder in Initial documents; connected sources describe Dell’s dbutil_2_3.sys vulnerability (CVE-2021-21551) as an insufficient access control flaw in a widely deployed Dell firmware-update driver. The issue enables write-what-where/privilege escalation via an ioctl (0x9b0c...
CVE-2021-20092
Buffalo WSR-2533DHPL2 (firmware ≤ 1.02) and WSR-2533DHP3 (firmware ≤ 1.24) web interfaces expose an improper access control vulnerability (CVE-2021-20092). An unauthenticated user can access sensitive information and, per sources, potentially alter router configuration. Exploitation is described ...