cve-2021-1648 vulnerabilities and exploits

(subscribe to this query)

6

CVSSv2

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information...

Cisco Sd-wan Vmanage -1 Article available

4

CVSSv2

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information...

Cisco Sd-wan Vmanage -1 Article available

4

CVSSv2

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information...

Cisco Ios Xe Sd-wan -Cisco Sd-wan Firmware Cisco Sd-wan Firmware 20.4.0 Cisco Sd-wan Vsmart Controller Firmware Cisco Sd-wan Vbond Orchestrator -1 Article available

9

CVSSv2

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user, aka 'Microsoft Exchange Server...

Microsoft Exchange Server 2016 Microsoft Exchange Server 20197 Github repositories available4 Articles available

10

CVSSv2

In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

Google Android 8.0 Google Android 8.1 Google Android 9.0 Google Android 10.0 Google Android 11.02 Articles available

7.8

CVSSv2

In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

Google Android 8.0 Google Android 8.1 Google Android 9.0 Google Android 10.0 Google Android 11.02 Articles available

6.8

CVSSv2

firefox use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk. A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free. We presume that with enough effort it could have been exploited to run...

Google Chrome3 Articles available

6.5

CVSSv2

Microsoft Exchange Remote Code Execution Vulnerability This CVE ID is unique from CVE-2020-17117, CVE-2020-17141, CVE-2020-17142, CVE-2020-17144....

Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Exchange Server 20191 Github repository available3 Articles available

7.2

CVSSv2

Microsoft Defender Remote Code Execution Vulnerability. Exploitation detected....

Microsoft Windows Defender -Microsoft Security Essentials -Microsoft System Center Endpoint Protection -Microsoft System Center Endpoint Protection 20121 Github repository available7 Articles available

« PREV 1 2 3 4 5 6 7 NEXT »