WellCMS 代码问题漏洞

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2021-1943)

According to the version of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashe...

EulerOS 2.0 SP9 : subversion (EulerOS-SA-2021-1959)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null-pointer-dereference flaw was found in modauthzsvn of subversion. This flaw allows a remote, unauthenticated attacker to cause a denial o...

EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1953)

According to the version of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly...

EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1934)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access o...

EulerOS 2.0 SP9 : pyyaml (EulerOS-SA-2021-1937)

According to the version of the pyyaml package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2021-1930)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file...

OBottle 安全漏洞

OBottle is a lighter, database-free blog. An arbitrary file download vulnerability exists in cg.php in OBottle version 2.0. An attacker can exploit this vulnerability to obtain sensitive information...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1921)

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way...

EulerOS 2.0 SP9 : subversion (EulerOS-SA-2021-1938)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null-pointer-dereference flaw was found in modauthzsvn of subversion. This flaw allows a remote, unauthenticated attacker to cause a denial o...

EulerOS 2.0 SP9 : openssl (EulerOS-SA-2021-1935)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0825-1 Rating: important References: 1186458 Cross-References: CVE-2021-21212 CVE-2021-30521 CVE-2021-30522 CVE-2021-30523 CVE-2021-30524 CVE-2021-30525 CVE-2021-30526 CVE-2021-30527 CVE-2021-30528...

Photon OS 2.0: Curl PHSA-2021-2.0-0349

An update of the curl package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0349. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

OpenSSH 3.5p1 Configuration Vulnerability

sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by...

Redirect URL matching ignores character casing

Impact Before version v0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match: 1. Registering a client with allowed redirect URL...

GHSA-GRFP-Q2MM-HFP6 Redirect URL matching ignores character casing

Impact Before version v0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match: 1. Registering a client with allowed redirect URL...

[SECURITY] Fedora 34 Update: tpm2-tss-3.1.0-1.fc34

tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 sy stem APIs. It sits between TPM driver and applications, providing TPM2.0 specifi ed APIs for applications to access TPM module through kernel TPM drivers...

SQL Injection Vulnerability in Ruoyi Management System (CNVD-2021-39812)

Ruoyi management system is based on SpringBoot2.0 rights management system . A SQL injection vulnerability exists in Ruoyi Management System, which can be exploited by an attacker to obtain sensitive information from the database...

Adminer 4.6.1 < 4.8.1 XSS Vulnerability - Linux

Adminer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adminer:adminer";...

Photon OS 2.0: Runc PHSA-2021-2.0-0347

An update of the runc package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0347. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...