Skip to main content
CVE-2021-42785 Nov 23, 22:15 CRITICAL Act Now

Buffer Overflow vulnerability in tvnviewer.exe of TightVNC Viewer allows a remote attacker to execute arbitrary instructions via a crafted FramebufferUpdate packet from a VNC server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Tightvnc
NVD
CVSS 3.1
9.8
EPSS
2.3%
CVE-2021-42784 Nov 23, 22:15 CRITICAL PATCH Act Now

OS Command Injection vulnerability in debug_fcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection D-Link Dwr 932C E1 Firmware
NVD
CVSS 3.1
9.8
EPSS
7.1%
CVE-2021-42783 Nov 23, 22:15 CRITICAL PATCH Act Now

Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass D-Link Dwr 932C E1 Firmware
NVD
CVSS 3.1
9.8
EPSS
3.8%
CVE-2021-36314 Nov 23, 20:15 CRITICAL PATCH Act Now

Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Dell Emc Cloud Link
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-37022 Nov 23, 16:15 CRITICAL Act Now

There is a Heap-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause root permission which can be escalated. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Harmonyos Huawei
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-38002 Nov 23, 22:15 CRITICAL Act Now

Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Chrome Google Use After Free Memory Corruption +4
NVD
CVSS 3.1
9.6
EPSS
0.9%
CVE-2021-36312 Nov 23, 20:15 CRITICAL Act Now

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Dell Cloudlink
NVD
CVSS 3.1
9.1
EPSS
1.0%
CVE-2021-37016 Nov 23, 16:15 CRITICAL Act Now

There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Harmonyos Huawei
NVD
CVSS 3.1
9.1
EPSS
0.8%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy