CVE-2021-26623
A remote code execution vulnerability due to incomplete check for ‘xheader_decode_path_record’ function’s parameter length value in the ark library. Remote attackers can […]
İçeriği inceleyinNIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
A remote code execution vulnerability due to incomplete check for ‘xheader_decode_path_record’ function’s parameter length value in the ark library. Remote attackers can […]
İçeriği inceleyinAn local privilege escalation vulnerability due to a “runasroot” command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient […]
İçeriği inceleyinA denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A […]
İçeriği inceleyinPhilips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that […]
İçeriği inceleyinPhilips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed […]
İçeriği inceleyinPhilips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or […]
İçeriği inceleyinOn Arista Strata family products which have “TCAM profileâ€� feature enabled when Port IPv4 access-list has a rule which matches on “vxlanâ€� […]
İçeriği inceleyinUnauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could […]
İçeriği inceleyinAn attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in […]
İçeriği inceleyinAn attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave […]
İçeriği inceleyinAn attacker could decipher the encryption and gain access to MDT AutoSave versions prior to v6.02.06. Zafiyet ile ilgili Genel Bilgi, Etki […]
İçeriği inceleyinAn attacker could utilize a function in MDT AutoSave versions prior to v6.02.06 that permits changing a designated path to another path […]
İçeriği inceleyin