Apache HTTP Server XSS Vulnerability (Sep 2012) - Linux

Apache HTTP Server is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

Apache HTTP Server DoS Vulnerability (Jul 2013) - Linux

Apache HTTP Server is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Apache HTTP Server Multiple Vulnerabilities (Sep 2014) - Linux

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

GHSA-WC73-W5R9-X9PC Cross-site Scripting in XXL-JOB

XXL-JOB 2.2.0 allows Stored XSS in Add User to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java...

CVE-2021-39486

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser...

Cross site scripting

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser...

CVE-2021-39486

A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser...

CVE-2021-37777

Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference IDOR. Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure...

CVE-2021-37777

The CVE-2021-37777 entry concerns Gila CMS 2.2.0, where an Insecure Direct Object Reference allows information disclosure. The issue arises via thumbnail access: thumbnails uploaded by one site owner can be accessed by another site owner by knowing the site name and fuzzing for image names. This ...

JVN#10168753: SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification

SNKRDUNK Market Place App for iOS provided SODA, Inc. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on and/or alter the communication. Solution Update the application Update the application to the latest...

CVE-2021-24667

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below. The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...

CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

ILM OpenEXR 代码问题漏洞

ILM OpenEXR is an image file format for High Dynamic Range HDR images from Industrial Light and Magic ILM. ILM OpenEXR suffers from a code issue vulnerability that stems from a flaw in the product's Imf25::Header::operator. The vulnerability can be exploited to execute malicious code. The followi...

FluidSynth: Remote code execution

Background FluidSynth is a real-time synthesizer based on the Soundfont 2 specifications. Description FluidSynth contains a use-after-free in sfloader/fluidsffile.c which occurs when parsing Soundfile 2 files. Impact A remote attacker could entice a user to open a specially crafted Soundfont 2 fi...

JerryScript Stack Overflow Vulnerability

JerryScript is a lightweight JavaScript engine . A stack overflow vulnerability exists in ecmaregexpmatch in ecma-regexp-object.c:535 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...

Unspecified vulnerability in JerryScript (CNVD-2021-42985)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionstatement in js-parser-statm.c:733 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in JerryScript (CNVD-2021-42994)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsetrystatementend in js-parser-statm.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in JerryScript (CNVD-2021-42989)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the parserparseobjectinitializer in /home/JerryScript/jerry-core/parser/js/js-parser-expr.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in JerryScript (CNVD-2021-42996)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 2.2.0 in js-parser.c:2185 in parserparsesource. No details of the vulnerability are provided at this time...

JerryScript heap buffer overflow vulnerability (CNVD-2021-43001)

JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in jmempoolscollectempty in jmem-poolman.c:165 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...