CVE-2021-30245: Externally Controlled Reference to a Resource in Another Sphere

The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-https hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to...

PT-2021-3326

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions prior to 4.1.10 Description The issue is related to the handling of non-https hyperlinks in Apache OpenOffice, which can lead to untrusted code execution if a link is specifically crafted. This problem has existed...

PT-2021-17251

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue was discovered that could lead to a Stack-Based Buffer Overflow. This occurs when a very long text entry is made for the s ip and s mac fields within the handler function of the...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless AC750 dual-band router. A stack buffer overflow vulnerability exists in the handler function of /goform/addassignment in the D-Link DIR-816 A2 version 1.10 B05. An attacker can exploit the vulnerability by entering long text in the sip and smac fields to cause the...

CVE-2021-24213

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page...

CVE-2021-24213

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page...

CVE-2021-24213: Improper Neutralization of Input During Web Page Generation

The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-619711d709)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-21938 · U-Boot +5 · U-Boot +5

Name of the Vulnerable Software and Affected Versions: U-Boot versions from v2020.10-rc2 to v2022.07-rc5 Description: The squashfs filesystem implementation in U-Boot contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. This can be triggered by...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-864dc37032)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SQL Injection Vulnerability in Zhiyuan A6-s Collaboration Management Software

Zhiyuan a6s Collaboration Management Software is a software that helps to manage the office operations of a company. Zhiyuan A6-s Collaboration Management Software suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SUSE SLES12 Security Update : nghttp2 (SUSE-SU-2021:0932-1) (Data Dribble) (Resource Loop)

This update for nghttp2 fixes the following issues : Security issues fixed : CVE-2020-11080: HTTP/2 Large Settings Frame DoS bsc1181358. CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service bsc1146184. CVE-2019-9511: Fixed...

SUSE-SU-2021:0932-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS bsc1181358. - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service bsc1146184. - CVE-2019-9511: Fixed...

Security Bulletin: IBM Security Guardium External S-TAP is affected by an Execution with Unnecessary Privileges vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-4184 DESCRIPTION: IBM Security Guardium performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other...

On the Insecurity of ES&S Voting Machines’ Hash Code

Andrew Appel and Susan Greenhalgh have a blog post on the insecurity of ES&Ss software authentication system: It turns out that ES&S has bugs in their hash-code checker: if the "reference hashcode" is completely missing, then itll say "yes, boss, everything is fine" instead of reporting an error...

S-CMS News Portal System Backend SQL Injection Vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. There is a SQL injection vulnerability in the background of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive informati...

USN-4820-1: S-nail vulnerability

It was discovered that S-nail incorrectly handled paths. An attacker could possible use this issue to write arbitrary files and escalate privileges...

SQL Injection Vulnerability in the in***.jsp Page of Zhiyuan A6-s Collaborative Management Software

Zhiyuan A6-s Collaboration Management Software is a set of collaborative office management software that can help small and micro-organizations of enterprises and institutions, government agencies, social groups, and a department within a medium or large organization to quickly deliver products...

SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that deals with technology development in the field of information technology, cloud computing, and Internet of Things IoT technology. There is a SQL injection vulnerability in the Enterprise Standardized Management System of R&S...

SQL Injection Vulnerability in Enterprise Standardization Management System of Runshen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that operates in the field of information technology, cloud computing, Internet of Things technology, such as technology development. There is a SQL injection vulnerability in the enterprise standardization management system of R&S...