CVE-2021-26334
The AMDPowerProfiler.sys driver of AMD ?Prof tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user. Devamını Oku
Devamını oku
CVE-2021-20609 (melipc_mi5122-vw_firmware, melsec_iq-r_r00_cpu_firmware, melsec_iq-r_r01_cpu_firmware, melsec_iq-r_r02_cpu_firmware, melsec_iq-r_r04_cpu_firmware, melsec_iq-r_r04_pcpu_firmware, melsec_iq-r_r08_cpu_firmware, melsec_iq-r_r08_pcpu_firmware, melsec_iq-r_r08_sfcpu_firmware, melsec_iq-r_r12_ccpu-v_firmware, melsec_iq-r_r120_cpu_firmware, melsec_iq-r_r120_pcpu_firmware, melsec_iq-r_r120_sfcpu_firmware, melsec_iq-r_r16_cpu_firmware, melsec_iq-r_r16_mtcpu_firmware, melsec_iq-r_r16_pcpu_firmware, melsec_iq-r_r16_sfcpu_firmware, melsec_iq-r_r32_cpu_firmware, melsec_iq-r_r32_mtcpu_firmware, melsec_iq-r_r32_pcpu_firmware, melsec_iq-r_r32_sfcpu_firmware, melsec_iq-r_r64_mtcpu_firmware, melsec_l02cpu(-p)_firmware, melsec_l06cpu(-p)_firmware, melsec_l26cpu(-p)_firmware, melsec_l26cpu-(p)bt_firmware, melsec_mr-mq100_firmware, melsec_q03udecpu_firmware, melsec_q03udvcpu_firmware, melsec_q04udecpu_firmware, melsec_q04udpvcpu_firmware, melsec_q04udvcpu_firmware, melsec_q06udecpu_firmware, melsec_q06udpvcpu_firmware, melsec_q06udvcpu_firmware, melsec_q100udecpu_firmware, melsec_q10udecpu_firmware, melsec_q12dccpu-v_firmware, melsec_q13udecpu_firmware, melsec_q13udpvcpu_firmware, melsec_q13udvcpu_firmware, melsec_q170mcpu_firmware, melsec_q170mscpu(-s1)_firmware, melsec_q172dcpu-s1_firmware, melsec_q172dscpu_firmware, melsec_q173dcpu-s1_firmware, melsec_q173dscpu_firmware, melsec_q20udecpu_firmware, melsec_q24dhccpu-ls_firmware, melsec_q24dhccpu-v(g)_firmware, melsec_q26dhccpu-ls_firmware, melsec_q26udecpu_firmware, melsec_q26udpvcpu_firmware, melsec_q26udvcpu_firmware, melsec_q50udecpu_firmware)
Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All…
CVE-2021-20610 (android_meeting_sdk, android_video_sdk, controllers_for_zoom_rooms, hybrid_mmr, hybrid_zproxy, iphone_os_meeting_sdk, iphone_os_video_sdk, macos_meeting_sdk, macos_video_sdk, meetings, meetings_for_blackberry, meetings_for_chrome_os, meetings_for_intune, rooms_for_conference_rooms, vdi_azure_virtual_desktop, vdi_citrix, vdi_vmware, vdi_windows_meeting_client, virtual_desktop_infrastructure, windows_meeting_sdk, windows_video_sdk, zoom_on-premise_meeting_connector_controller, zoom_on-premise_meeting_connector_mmr, zoom_on-premise_recording_connector, zoom_on-premise_virtual_room_connector, zoom_on-premise_virtual_room_connector_load_balancer)
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R…
CVE-2021-20611 (melipc_mi5122-vw_firmware, melsec_iq-r_r00_cpu_firmware, melsec_iq-r_r01_cpu_firmware, melsec_iq-r_r02_cpu_firmware, melsec_iq-r_r04_cpu_firmware, melsec_iq-r_r04_pcpu_firmware, melsec_iq-r_r08_cpu_firmware, melsec_iq-r_r08_pcpu_firmware, melsec_iq-r_r08_sfcpu_firmware, melsec_iq-r_r12_ccpu-v_firmware, melsec_iq-r_r120_cpu_firmware, melsec_iq-r_r120_pcpu_firmware, melsec_iq-r_r120_sfcpu_firmware, melsec_iq-r_r16_cpu_firmware, melsec_iq-r_r16_mtcpu_firmware, melsec_iq-r_r16_pcpu_firmware, melsec_iq-r_r16_sfcpu_firmware, melsec_iq-r_r32_cpu_firmware, melsec_iq-r_r32_mtcpu_firmware, melsec_iq-r_r32_pcpu_firmware, melsec_iq-r_r32_sfcpu_firmware, melsec_iq-r_r64_mtcpu_firmware, melsec_l02cpu(-p)_firmware, melsec_l06cpu(-p)_firmware, melsec_l26cpu(-p)_firmware, melsec_l26cpu-(p)bt_firmware, melsec_mr-mq100_firmware, melsec_q03udecpu_firmware, melsec_q03udvcpu_firmware, melsec_q04udecpu_firmware, melsec_q04udpvcpu_firmware, melsec_q04udvcpu_firmware, melsec_q06udecpu_firmware, melsec_q06udpvcpu_firmware, melsec_q06udvcpu_firmware, melsec_q100udecpu_firmware, melsec_q10udecpu_firmware, melsec_q12dccpu-v_firmware, melsec_q13udecpu_firmware, melsec_q13udpvcpu_firmware, melsec_q13udvcpu_firmware, melsec_q170mcpu_firmware, melsec_q170mscpu(-s1)_firmware, melsec_q172dcpu-s1_firmware, melsec_q172dscpu_firmware, melsec_q173dcpu-s1_firmware, melsec_q173dscpu_firmware, melsec_q20udecpu_firmware, melsec_q24dhccpu-ls_firmware, melsec_q24dhccpu-v(g)_firmware, melsec_q26dhccpu-ls_firmware, melsec_q26udecpu_firmware, melsec_q26udpvcpu_firmware, melsec_q26udvcpu_firmware, melsec_q50udecpu_firmware)
Improper Input Validation vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All…
CVE-2021-20610 (melipc_mi5122-vw_firmware, melsec_iq-r_r00_cpu_firmware, melsec_iq-r_r01_cpu_firmware, melsec_iq-r_r02_cpu_firmware, melsec_iq-r_r04_cpu_firmware, melsec_iq-r_r04_pcpu_firmware, melsec_iq-r_r08_cpu_firmware, melsec_iq-r_r08_pcpu_firmware, melsec_iq-r_r08_sfcpu_firmware, melsec_iq-r_r12_ccpu-v_firmware, melsec_iq-r_r120_cpu_firmware, melsec_iq-r_r120_pcpu_firmware, melsec_iq-r_r120_sfcpu_firmware, melsec_iq-r_r16_cpu_firmware, melsec_iq-r_r16_mtcpu_firmware, melsec_iq-r_r16_pcpu_firmware, melsec_iq-r_r16_sfcpu_firmware, melsec_iq-r_r32_cpu_firmware, melsec_iq-r_r32_mtcpu_firmware, melsec_iq-r_r32_pcpu_firmware, melsec_iq-r_r32_sfcpu_firmware, melsec_iq-r_r64_mtcpu_firmware, melsec_l02cpu(-p)_firmware, melsec_l06cpu(-p)_firmware, melsec_l26cpu(-p)_firmware, melsec_l26cpu-(p)bt_firmware, melsec_mr-mq100_firmware, melsec_q03udecpu_firmware, melsec_q03udvcpu_firmware, melsec_q04udecpu_firmware, melsec_q04udpvcpu_firmware, melsec_q04udvcpu_firmware, melsec_q06udecpu_firmware, melsec_q06udpvcpu_firmware, melsec_q06udvcpu_firmware, melsec_q100udecpu_firmware, melsec_q10udecpu_firmware, melsec_q12dccpu-v_firmware, melsec_q13udecpu_firmware, melsec_q13udpvcpu_firmware, melsec_q13udvcpu_firmware, melsec_q170mcpu_firmware, melsec_q170mscpu(-s1)_firmware, melsec_q172dcpu-s1_firmware, melsec_q172dscpu_firmware, melsec_q173dcpu-s1_firmware, melsec_q173dscpu_firmware, melsec_q20udecpu_firmware, melsec_q24dhccpu-ls_firmware, melsec_q24dhccpu-v(g)_firmware, melsec_q26dhccpu-ls_firmware, melsec_q26udecpu_firmware, melsec_q26udpvcpu_firmware, melsec_q26udvcpu_firmware, melsec_q50udecpu_firmware)
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R…
CVE-2020-10627 (insulin_management_system_firmware)
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able…
CVE-2021-26334 (amd_uprof)
The AMDPowerProfiler.sys driver of AMD ?Prof tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user. Devamını Oku
CVE-2020-10627
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able…
CVE-2021-20609
Uncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All…
CVE-2021-20610
Improper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R…
CVE-2021-20611
Improper Input Validation vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24" and prior, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "57" and prior, MELSEC iQ-R Series R08/16/32/120SFCPU All versions, MELSEC iQ-R Series R08/16/32/120PCPU Firmware versions "29" and prior, MELSEC iQ-R Series R08/16/32/120PSFCPU All versions, MELSEC iQ-R Series R16/32/64MTCPU All versions, MELSEC iQ-R Series R12CCPU-V All…
CVE-2021-25967
In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file upload of users’ profile picture. This allows low privileged application users to store malicious scripts in their profile picture. These scripts are executed in a victim’s browser when they open the malicious profile picture Devamını Oku