‼ CVE-2021-45292 ‼
📖 Read
via "National Vulnerability Database".
The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-19770 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-27445 ‼
📖 Read
via "National Vulnerability Database".
Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36341 ‼
📖 Read
via "National Vulnerability Database".
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45288 ‼
📖 Read
via "National Vulnerability Database".
A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36316 ‼
📖 Read
via "National Vulnerability Database".
Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation on the AUI.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45293 ‼
📖 Read
via "National Vulnerability Database".
A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44207 ‼
📖 Read
via "National Vulnerability Database".
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.📖 Read
via "National Vulnerability Database".
❌ Half-Billion Compromised Credentials Lurking on Open Cloud Server ❌
📖 Read
via "Threat Post".
A quarter-billion of those passwords were not seen in previous breaches that have been added to Have I Been Pwned.📖 Read
via "Threat Post".
Threat Post
Half-Billion Compromised Credentials Lurking on Open Cloud Server
A quarter-billion of those passwords were not seen in previous breaches that have been added to Have I Been Pwned.
❌ Java Code Repository Riddled with Hidden Log4j Bugs; Here’s Where to Look ❌
📖 Read
via "Threat Post".
There are 17,000npatched Log4j packages in the Maven Central ecosystem, leaving massive supply-chain risk on the table from Log4Shell exploits.📖 Read
via "Threat Post".
Threat Post
Java Code Repository Riddled with Hidden Log4j Bugs; Here’s Where to Look
There are 17,000 unpatched Log4j packages in the Maven Central ecosystem, leaving massive supply-chain risk on the table from Log4Shell exploits.
‼ CVE-2021-45297 ‼
📖 Read
via "National Vulnerability Database".
An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44859 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38893 ‼
📖 Read
via "National Vulnerability Database".
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209512.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44422 ‼
📖 Read
via "National Vulnerability Database".
An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38900 ‼
📖 Read
via "National Vulnerability Database".
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44423 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38966 ‼
📖 Read
via "National Vulnerability Database".
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212357.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44860 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TIF files. An unchecked input data from a crafted TIF file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44917 ‼
📖 Read
via "National Vulnerability Database".
A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44925 ‼
📖 Read
via "National Vulnerability Database".
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44922 ‼
📖 Read
via "National Vulnerability Database".
A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash.📖 Read
via "National Vulnerability Database".