Free Trial

All Posts by: Virtual Patching

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: Yes Product: MIFARE Ultralight/NTAG Card Remote: No Risk: problematic Vendor: NXP

NXP MIFARE Ultralight/NTAG Card protection mechanism [CVE-2021-33881]

A vulnerability was found in NXP MIFARE Ultralight and NTAG Card (affected version not known) and classified as problematic. Affected

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: ZOC Remote: Partially Risk: problematic Vendor: EmTec

EmTec ZOC up to 8.02.1 unknown vulnerability [CVE-2021-32198]

A vulnerability was found in EmTec ZOC up to 8.02.1. It has been declared as problematic. Upgrading to version 8.02.2

Common Vulnerabilities and Exposures

Invoice Ninja up to 4.3.x AccountRepository.php deserialization

A vulnerability classified as critical was found in Invoice Ninja up to 4.3.x. Affected by this vulnerability is an unknown

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: GameLoop Remote: Yes Risk: problematic Vendor: Tencent

Tencent GameLoop up to 4.1.21.89 Update cleartext transmission

A vulnerability, which was classified as problematic, was found in Tencent GameLoop up to 4.1.21.89. This affects an unknown part

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: Kernel Remote: Partially Risk: critical Type: Operating System Vendor: Linux

Linux Kernel up to 5.9 ucma.c ctx_list/ucma_migrate_id use after free

A vulnerability was found in Linux Kernel up to 5.9 (Operating System). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

IBM DataPower Gateway up to 10.0.1.0/2018.4.1.14 GET Request information disclosure

A vulnerability was found in IBM DataPower Gateway up to 10.0.1.0/2018.4.1.14. It has been rated as problematic. Affected by this

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: Video Embed Plugin Remote: Yes Risk: critical Type: WordPress Plugin

Video Embed Plugin up to 1.0 on WordPress GET Parameter id sql injection

A vulnerability classified as critical has been found in Video Embed Plugin up to 1.0 on WordPress (WordPress Plugin). This

Common Vulnerabilities and Exposures Countermeasures: Patch Exploit: No Local: No Product: Wireshark Remote: Yes Risk: problematic Type: Packet Analyzer Software

Wireshark 3.4.0 up to 3.4.5 DVB-S2-BB Dissector denial of service

A vulnerability, which was classified as problematic, has been found in Wireshark 3.4.0 up to 3.4.5 (Packet Analyzer Software). This

Common Vulnerabilities and Exposures

FlightLog Plugin up to 3.0.2 on WordPress POST sql injection

A vulnerability, which was classified as critical, was found in FlightLog Plugin up to 3.0.2 on WordPress (WordPress Plugin). Affected

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: JNews Theme Remote: Yes Risk: problematic Type: WordPress Plugin

JNews Theme up to 8.0.5 on WordPress POST Request /?ajax-request=jnews cat_id cross site scripting

A vulnerability has been found in JNews Theme up to 8.0.5 on WordPress (WordPress Plugin) and classified as problematic. Affected

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: iFlyChat Plugin Remote: Yes Risk: problematic Type: WordPress Plugin

iFlyChat Plugin up to 4.6.4 on WordPress APP ID Setting cross site scripting

A vulnerability was found in iFlyChat Plugin up to 4.6.4 on WordPress (WordPress Plugin). It has been classified as problematic.

Common Vulnerabilities and Exposures

Sharp NEC UN462A HTTP Request Remote Privilege Escalation [CVE-2021-20698]

A vulnerability was found in Sharp NEC UN462A, UN462VA, UN492S, UN492VS, UN552A, UN552S, UN552VS, UN552, UN552V, UX552S, UN552, V864Q, C861Q,

Common Vulnerabilities and Exposures Countermeasures: Unknown Exploit: No Local: No Product: ArcGIS Server Remote: Yes Risk: critical

ArcGIS Server up to 10.8.1 sql injection [CVE-2021-29099]

A vulnerability was found in ArcGIS Server up to 10.8.1. It has been rated as critical. This issue affects an

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: WildFly Remote: Partially Risk: critical Type: Application Server Software Vendor: Red Hat

Red Hat WildFly up to 19.x EJBContext Principle privileges management

A vulnerability classified as critical has been found in Red Hat WildFly up to 19.x (Application Server Software). Affected is

Common Vulnerabilities and Exposures

Sharp NEC UN462A HTTP Request buffer overflow [CVE-2021-20699]

A vulnerability classified as critical was found in Sharp NEC UN462A, UN462VA, UN492S, UN492VS, UN552A, UN552S, UN552VS, UN552, UN552V, UX552S,

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: PageLayer Remote: Yes Risk: problematic

PageLayer up to 1.3.4 Color Settings cross site scripting

A vulnerability, which was classified as problematic, was found in PageLayer up to 1.3.4. This affects an unknown function of

Common Vulnerabilities and Exposures

Zoho ManageEngine Key Manager Plus up to 6000 User-Management Page cross site scripting

A vulnerability has been found in Zoho ManageEngine Key Manager Plus up to 6000 and classified as problematic. This vulnerability

Common Vulnerabilities and Exposures Countermeasures: Upgrade Exploit: No Local: No Product: Chrome Remote: Yes Risk: critical Type: Web Browser Vendor: Google

Google Chrome prior 91.0.4472.77 on Android Autofill heap-based overflow

A vulnerability was found in Google Chrome on Android (Web Browser). It has been classified as critical. Affected is an

Common Vulnerabilities and Exposures

Google Chrome prior 91.0.4472.77 on Android WebAuthentication use after free

A vulnerability was found in Google Chrome on Android (Web Browser). It has been declared as critical. Affected by this

Common Vulnerabilities and Exposures

Google Chrome prior 91.0.4472.77 PopupBlocker Remote Code Execution

A vulnerability, which was classified as critical, has been found in Google Chrome (Web Browser). This issue affects an unknown

Common Vulnerabilities and Exposures

Google Chrome prior 91.0.4472.77 iFrameSandbox Remote Code Execution

A vulnerability, which was classified as critical, was found in Google Chrome (Web Browser). Affected is some unknown functionality of

Common Vulnerabilities and Exposures

Google Chrome prior 91.0.4472.77 Content Security Policy Remote Code Execution

A vulnerability was found in Google Chrome (Web Browser). It has been classified as critical. This affects an unknown code

Common Vulnerabilities and Exposures

Linux Kernel up to 5.0.18 XFRM Subsystem xfrm_state_fini use after free

A vulnerability classified as critical has been found in Linux Kernel up to 5.0.18 (Operating System). Affected is the function

Common Vulnerabilities and Exposures

Linux Kernel up to 5.8.0 Bluetooth hci_event.c hci_extended_inquiry_result_evt out-of-bounds read

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.8.0 (Operating System). Affected by