CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...

CVE-2021-27410

The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Allyn Connex Device Integration Suite – Network Connectivity Engine NC...

CVE-2021-27408

The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools Welch Allyn Service Tool: versions prior to v1.10, Welch Ally...

PRTG Network Monitor < 22.1.74 CSRF Vulnerability

PRTG Network Monitor is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PRTG Network Monitor < 21.1.66.1623 Information Disclosure Vulnerability

PRTG Network Monitor is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

PT-2021-17445

Name of the Vulnerable Software and Affected Versions Welch Allyn Service Tool versions prior to v1.10 Welch Allyn Connex Device Integration Suite – Network Connectivity Engine NCE versions prior to v5.3 Welch Allyn Software Development Kit SDK versions prior to v3.2 Welch Allyn Connex Central...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2021-33203 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

Cross site request forgery (csrf)

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

CVE-2021-34547

CVE-2021-34547 affects Paessler PRTG Network Monitor (version 20.1.55.1775) and is a CSRF flaw in the /editsettings endpoint that can lead to unintended user-creation actions. The description explicitly states a cross-site request forgery vulnerability in the web application, enabling an attacker...

Paessler PRTG Network Monitor 跨站请求伪造漏洞

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler, Germany. PRTG Network Monitor suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a...

PT-2021-20541

Name of the Vulnerable Software and Affected Versions: PRTG Network Monitor version 20.1.55.1775 Description: The issue allows for Cross-Site Request Forgery CSRF attacks on the /editsettings endpoint, which can lead to the creation of new user accounts. Recommendations: For PRTG Network Monitor...

CVE-2021-34547: Cross-Site Request Forgery (CSRF)

PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation...

Xen 信息泄露漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. An information disclosure vulnerability exis...

Cambridge Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in XEN that...

pfSense cross-site scripting vulnerability (CNVD-2021-43531)

pfsense is an open source routing and firewall software, customized and developed based on freebsd system. A stored cross-site scripting vulnerability exists in the loadbalancermonitor.php function in pfSense version 2.4.5-p1. An attacker can exploit this vulnerability to execute arbitrary web...

Mmemed Welch Allyn Connex 缓冲区错误漏洞

The Mmemed Welch Allyn Connex is an industrial control device from the Spanish company Mmemed. An advanced touch screen monitor. A buffer error vulnerability exists in Hillrom Welch Allyn that originates from an out-of-bounds write and can be exploited by an attacker for arbitrary code execution...