5956 matches found
CVE-2021-33178
creationtimestamp| type| source ---|---|--- 2021-10-14 18:27:48+00:00| seen| https://t.me/cibsecurity/30570...
CVE-2020-19954
creationtimestamp| type| source ---|---|--- 2021-10-14 18:27:47+00:00| seen| https://t.me/cibsecurity/30569...
CVE-2020-19962
creationtimestamp| type| source ---|---|--- 2021-10-14 18:27:45+00:00| seen| https://t.me/cibsecurity/30566...
CVE-2021-3882
creationtimestamp| type| source ---|---|--- 2021-10-14 12:34:03+00:00| seen| https://t.me/cibsecurity/30548...
Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19
Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 Vaadin 10.0.0 through 10.0.18, 1.1.0 prior to 2.0.0 Vaadin 11 prior to 14, 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, and 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0....
ihfdubai.ae Cross Site Scripting vulnerability OBB-2164561
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-38458
creationtimestamp| type| source ---|---|--- 2021-10-12 18:25:54+00:00| seen| https://t.me/cibsecurity/30425 2022-02-13 13:50:12+00:00| seen| https://t.me/NeKaspersky/1799 2022-02-14 17:40:00+00:00| seen| https://t.me/truesecator/2627...
CVE-2021-38460
creationtimestamp| type| source ---|---|--- 2021-10-12 18:25:39+00:00| seen| https://t.me/cibsecurity/30413 2022-02-13 13:50:12+00:00| seen| https://t.me/NeKaspersky/1799 2022-02-14 17:40:00+00:00| seen| https://t.me/truesecator/2627...
CVE-2021-33725
creationtimestamp| type| source ---|---|--- 2021-10-12 14:25:46+00:00| seen| https://t.me/cibsecurity/30392...
Update for IDOR vulnerability in System Center Operations Manager (KB5006871)
Update for IDOR vulnerability in System Center Operations Manager KB5006871 Applies to: System Center 2019 Operations Manager, System Center 2016 Operations Manager, System Center 2012 R2 Operations Manager Introduction This article describes an issue that is fixed for System Center Operations...
CVE-2021-22257
An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with public visibility disabled. This allows user...
Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws
Google on Thursday pushed urgent security fixes for its Chrome browser, including a pair of new security weaknesses that the company said are being exploited in the wild, making them the fourth and fifth actively zero-days plugged this month alone. The issues, designated as CVE-2021-37975 and...
CVE-2021-36219
An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed,...
Design/Logic Flaw
An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed,...
CVE-2021-36219
An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed,...
Cross site scripting
On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...
CentOS 8 : nodejs:14 (CESA-2021:3666)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3666 advisory. - nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930, CVE-2021-22940 - nodejs: Improper handling of untypical characters in domai...
CVE-2021-3807 vulnerabilities
Vulnerabilities for packages: arangodb...