Threat database

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

Race condition in snap-confine's must_mkdir_and_open_with_perms()

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design WP Roadmap – Product Feedback Board allows Stored XSS.This issue affects WP Roadmap – Product Feedback Board: from n/a through 1.0.8.

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

CVE-2021-20028 is a high-severity SQL injection vulnerability in SonicWall Secure Remote Access (SRA) products. It arises from improper neutralization of SQL commands, allowing attackers to inject malicious SQL code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.

CVE-2019-7483 is a high-severity unauthenticated directory traversal vulnerability in SonicWall SMA100 devices. It exists in the handleWAFRedirect CGI, allowing attackers to test for the presence of files on the server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

CVE-2020-5135 is a buffer overflow vulnerability in SonicWall SonicOS that allows remote attackers to cause Denial of Service (DoS) and potentially execute arbitrary code by sending malicious requests to the firewall. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

SonicWall SMA 100 Appliances are affected by an unauthenticated stack-based buffer overflow vulnerability (CVE-2021-20038) that can lead to remote code execution. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2021-20023 is a path traversal vulnerability in SonicWall Email Security that allows an authenticated attacker to read arbitrary files on the affected system. This vulnerability has been observed in active exploit chains combined with other SonicWall Email Security vulnerabilities to escalate privileges. It is classified as high severity due to its impact and known exploitation in the wild.

CVE-2021-20022 is a vulnerability in SonicWall Email Security that allows a post-authenticated attacker to upload files of dangerous types to the remote host. This vulnerability is part of an exploit chain with CVE-2021-20021 and CVE-2021-20023, enabling privilege escalation. It has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-20021 is an improper privilege management vulnerability in SonicWall Email Security that allows attackers to create an administrative account via a crafted HTTP request. This vulnerability is part of an exploit chain with CVE-2021-20022 and CVE-2021-20023 used for privilege escalation. It has been exploited in the wild and is associated with known ransomware campaigns.

CVE-2021-20016 is a critical SQL injection vulnerability in SonicWall SSLVPN SMA100 that allows unauthenticated remote attackers to access credentials. It has a high CVSS score of 9.8 and has been exploited in the wild, including use in ransomware campaigns.

CVE-2019-7481 is a SQL injection vulnerability in SonicWall SMA100 that allows unauthenticated users to gain read-only access to unauthorized resources. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.