MISC Archives - RedPacket Security

Vulnerabilities

CVE-2022-0128

January 16, 2022 admin CVE, CVE-2022-0128, MISC, patch, vulnerability

vim is vulnerable to Out-of-bounds Read

Vulnerabilities

CVE-2021-23727

January 16, 2022 admin Broken Link, CVE, CVE-2021-23727, MISC, vulnerability

This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.

Vulnerabilities

CVE-2022-21663

January 16, 2022 admin CVE, CVE-2022-21663, MISC, Release Notes, vulnerability

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.

Vulnerabilities

CVE-2022-21664

January 16, 2022 admin CVE, CVE-2022-21664, MISC, Release Notes, vulnerability

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there’s potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 4.1.34. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.

Vulnerabilities

CVE-2021-4065

January 15, 2022 admin CVE, CVE-2021-4065, MISC, Vendor Advisory, vulnerability

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4065

January 15, 2022 admin CVE, CVE-2021-4065, MISC, Vendor Advisory, vulnerability

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4065

January 15, 2022 admin CVE, CVE-2021-4065, MISC, Vendor Advisory, vulnerability

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4065

January 15, 2022 admin CVE, CVE-2021-4065, MISC, Vendor Advisory, vulnerability

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4066

January 15, 2022 admin CVE, CVE-2021-4066, MISC, Vendor Advisory, vulnerability

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4066

January 15, 2022 admin CVE, CVE-2021-4066, MISC, Vendor Advisory, vulnerability

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4066

January 15, 2022 admin CVE, CVE-2021-4066, MISC, Vendor Advisory, vulnerability

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4067

January 15, 2022 admin CVE, CVE-2021-4067, MISC, Vendor Advisory, vulnerability

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4067

January 15, 2022 admin CVE, CVE-2021-4067, MISC, Vendor Advisory, vulnerability

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4067

January 15, 2022 admin CVE, CVE-2021-4067, MISC, Vendor Advisory, vulnerability

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4067

January 15, 2022 admin CVE, CVE-2021-4067, MISC, Vendor Advisory, vulnerability

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4078

January 15, 2022 admin CVE, CVE-2021-4078, MISC, Vendor Advisory, vulnerability

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vulnerabilities

CVE-2021-4079

January 15, 2022 admin CVE, CVE-2021-4079, MISC, Vendor Advisory, vulnerability

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.

Vulnerabilities

CVE-2021-4079

January 15, 2022 admin CVE, CVE-2021-4079, MISC, Vendor Advisory, vulnerability

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets.

Vulnerabilities

CVE-2021-34087

January 14, 2022 admin CVE, CVE-2021-34087, MISC, Technical Description, vulnerability

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page.

Vulnerabilities

CVE-2021-39985

January 14, 2022 admin CVE, CVE-2021-39985, MISC, Vendor Advisory, vulnerability

The HwNearbyMain module has a Improper Validation of Array Index vulnerability.Successful exploitation of this vulnerability may cause a process to restart.

Vulnerabilities

CVE-2021-45442

January 14, 2022 admin CVE, CVE-2021-45442, MISC, patch, vulnerability

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Vulnerabilities

CVE-2022-21841

January 14, 2022 admin CVE, CVE-2022-21841, MISC, patch, vulnerability

Microsoft Excel Remote Code Execution Vulnerability.

Vulnerabilities

CVE-2021-45441

January 14, 2022 admin CVE, CVE-2021-45441, MISC, patch, vulnerability

A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Vulnerabilities

CVE-2021-39969

January 13, 2022 admin CVE, CVE-2021-39969, MISC, Vendor Advisory, vulnerability

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

← Previous