Google Chrome < 90.0.4430.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 90.0.4430.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202104stable-channel-update-for-desktop14 advisory. - Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed ...

Microsoft Office 2010 Remote Code Execution Vulnerability (KB4504738)

This host is missing an important security update according to Microsoft KB4504738 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2018-19661 affecting package libsndfile 1.0.28-14

CVE-2018-19661 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2019-3832 affecting package libsndfile 1.0.28-14

CVE-2019-3832 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2018-19758 affecting package libsndfile 1.0.28-14

CVE-2018-19758 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2020-9975

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute...

CVE-2020-9955

CVE-2020-9955 is an ImageIO out-of-bounds write vulnerability in Apple platforms. Apple reports that processing a maliciously crafted image may lead to arbitrary code execution. Concrete details across connected sources show the issue affecting ImageIO on iOS 14.0 / iPadOS 14.0, tvOS 14.0, watchO...

Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 Vaadin 12.0.0 through 14.4.9, and 6.0.0 through 6.0.1 Vaadin 19.0.0 allows attacker to access application classes and resources on the server via crafted HTTP request. See CWE-402: Transmission of Private...

Exploit for Server-Side Request Forgery in F5 Big-Ip_Access_Policy_Manager

F5 BIG-IP 远程命令执行漏洞（CVE-2021-22986） 漏洞影响 F5 BIG-IP 16.x: 1...

Adobe FrameMaker 2019 <= 15.0.8 (2019.0.8) / Adobe FrameMaker 2020 <= 16.0.1 (2020.0.1) Arbitrary Code Execution (APSB21-14)

The version of Adobe FrameMaker installed on the remote Windows host is prior or equal to Adobe FrameMaker 2019 15.0.8 / Adobe FrameMaker 2020 16.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb21-14 advisory. - Adobe Framemaker version 2020.0.1 and earlier is affected...

Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17

Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...

CVE-2021-21480

creationtimestamp| type| source ---|---|--- 2021-03-09 18:52:04+00:00| seen| https://t.me/cibsecurity/24614 2022-04-14 10:06:02+00:00| seen| https://t.me/truesecator/2847 2026-07-29 12:02:21+00:00| seen| https://t.me/reverseame/4104 2026-07-30 00:02:24+00:00| seen| https://t.me/reverseame/4104...

Oracle Linux 8 : nodejs:14 (ELSA-2021-0744)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0744 advisory. - Fix CVE-2020-10531 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

CVE-2021-23132

creationtimestamp| type| source ---|---|--- 2021-03-08 00:02:43+00:00| published-proof-of-concept| https://t.me/antichat/9342 2021-03-14 14:21:19+00:00| seen| https://t.me/LearnExploit/2156 2021-10-28 05:17:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2846 2022-02-...

Utah's ‘Porn Filter’ Law Passes the State Legislature

Plus: An iOS 14 jailbreak is out, Solarwinds details emerge, and more of the week's top security news...

CVE-2019-16782

creationtimestamp| type| source ---|---|--- 2021-03-05 12:47:27+00:00| seen| https://t.me/cibsecurity/24503 2024-03-15 15:22:07+00:00| seen| https://t.me/ctinow/208841 2025-02-14 10:08:10+00:00| seen| Telegram/0UKdrEe-YbJuuiI55HGsNMM2UUSSS6hdvPpLoO34gdgR-WA 2026-07-26 09:08:41+00:00| seen|...

macOS : macOS Server < 5.11 XSS (HT211932)

The version of macOS Server formerly known as Mac OS X Server installed on the remote host is prior to 5.11. It is, therefore, affected by an open redirect or cross-site scripting XSS vulnerability due to an issue in the parsing of URLs. An unauthenticated, remote attacker can exploit this, by...

Digium Asterisk Security Vulnerability

Digium Asterisk is a set of open source telephone exchange PBX system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR, and more. A security vulnerability exists in Digium Asterisk. The vulnerability stems from allowing a...

CentOS 8 : nodejs:14 (CESA-2021:0551)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:0551 advisory. - nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function CVE-2020-15366 - nodejs-npm-user-validate: improper input validation...

RHEL 8 : nodejs:14 (RHSA-2021:0551)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0551 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...