‼ CVE-2021-33480 ‼
📖 Read
via "National Vulnerability Database".
An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35528 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33479 ‼
📖 Read
via "National Vulnerability Database".
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43977 ‼
📖 Read
via "National Vulnerability Database".
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33481 ‼
📖 Read
via "National Vulnerability Database".
A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32234 ‼
📖 Read
via "National Vulnerability Database".
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43975 ‼
📖 Read
via "National Vulnerability Database".
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.📖 Read
via "National Vulnerability Database".
🕴 Cybercriminals Contemplate 'Exploit-as-a-Service' Model 🕴
📖 Read
via "Dark Reading".
Researchers share their findings on the current zero-day market and how criminals' strategies may shift in the future.📖 Read
via "Dark Reading".
Dark Reading
Cybercriminals Contemplate 'Exploit-as-a-Service' Model
Researchers share their findings on the current zero-day market and how criminals' strategies may shift in the future.
‼ CVE-2021-33092 ‼
📖 Read
via "National Vulnerability Database".
Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0200 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds write in the firmware for Intel(R) Ethernet 700 Series Controllers before version 8.2 may allow a privileged user to potentially enable an escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41274 ‼
📖 Read
via "National Vulnerability Database".
solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidus_auth_devise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of `solidus_auth_devise` are affected if `protect_from_forgery` method is both: Executed whether as: A `before_action` callback (the default) or A `prepend_before_action` (option `prepend: true` given) before the `:load_object` hook in `Spree::UserController` (most likely order to find). Configured to use `:null_session` or `:reset_session` strategies (`:null_session` is the default in case the no strategy is given, but `rails --new` generated skeleton use `:exception`). Users should promptly update to `solidus_auth_devise` version `2.5.4`. Users unable to update should if possible, change their strategy to `:exception`. Please see the linked GHSA for more workaround details.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33062 ‼
📖 Read
via "National Vulnerability Database".
Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43553 ‼
📖 Read
via "National Vulnerability Database".
PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0135 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33087 ‼
📖 Read
via "National Vulnerability Database".
Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0158 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0075 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds write in firmware for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and some Killer(TM) WiFi in Windows 10 may allow a privileged user to potentially enable denial of service via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33058 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33071 ‼
📖 Read
via "National Vulnerability Database".
Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0148 ‼
📖 Read
via "National Vulnerability Database".
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0199 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation in the firmware for the Intel(R) Ethernet Network Controller E810 before version 1.6.0.6 may allow a privileged user to potentially enable a denial of service via local access.📖 Read
via "National Vulnerability Database".