Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability [CVE-2021-1619]

CVE number – CVE-2021-1619 A vulnerability in the authentication, authorization, and accounting (AAA) function of Cisco IOS XE Software could

Read more

Researchers at Claroty discover 11 vulnerabilities in NagiosXI

Researchers at Claroty discovered 11 vulnerabilities in NagiosXI that, in combination, could be used to take over network infrastructure remotely.

Read more

VMware vCenter Server local privilege escalation vulnerability (CVE-2021-21991)

CVE number = CVE-2021-21991 The VMware vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. 

Read more

Apache OpenOffice remote code execution flaw [CVE-2021-33035]

CVE number = CVE-2021-33035 Security researcher Eugene Lim (@spaceraccoonsec) has revealed technical details about a remote code execution flaw in

Read more

VMware vCenter Server file upload vulnerability (CVE-2021-22005)

CVE number = CVE-2021-22005 The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with

Read more

Netgear remote code execution security vulnerability [CVE-2021-40847]

CVE number – CVE-2021-40847 Netgear has released security updates to address a remote code execution vulnerability in multiple NETGEAR routers.

Read more

Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability [CVE-2021-39839]

CVE number – CVE-2021-39839 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader

Read more

Cisco IOS XR Software Arbitrary File Read and Write Vulnerability [CVE-2021-34718]

CVE number – CVE-2021-34718 A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated,

Read more

Disc Soft Ltd Daemon Tools Pro ISO Parsing memory corruption vulnerability [CVE-2021-21832]

CVE number = CVE-2021-21832 A memory corruption vulnerability exists in the ISO Parsing functionality of Disc Soft Ltd Deamon Tools

Read more

Nitro Pro PDF JavaScript document.flattenPages vulnerability [CVE-2021-21798]

CVE number = CVE-2021-21798 An exploitable return of stack variable address vulnerability exists in the JavaScript implementation of Nitro Pro

Read more
%d bloggers like this: