986 matches found
CVE-2021-29469
Node-redis (Node.js Redis client) is vulnerable prior to version 3.1.1 due to a regex used to detect monitor messages that can backtrack exponentially, potentially causing a denial of service when a client is in monitoring mode. The issue is fixed in version 3.1.1. Affected context includes IBM a...
PT-2021-18237 · Unknown · Node-Redis
Name of the Vulnerable Software and Affected Versions: Node-redis versions prior to 3.1.1 Description: The issue is related to the regex used to detect monitor messages when a client is in monitoring mode, which could cause exponential backtracking on some strings, leading to a denial of service...
Debian DLA-2608-1 : jquery security update
Two vulnerabilities have been discovered in jquery's handling of untrusted HTML which may result in execution of untrusted code. For Debian 9 stretch, these problems have been fixed in version 3.1.1-2+deb9u2. We recommend that you upgrade your jquery packages. For the detailed security status of...
Django Incorrect Default Permissions
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ is used. FILEUPLOADDIRECTORYPERMISSIONS mode was not applied to intermediate-level directories created in the process of uploading files. It was also not applied to intermediate-level...
QCubed 3.1.1 Cross Site Scripting
QCube Cross-Site-Scripting ====================== | Identifier: | AIT-SA-20210215-03 | | Target: | QCubed Framework | | Vendor: | QCubed | | Version: | all versions including 3.1.1 | | CVE: | CVE-2020-24912 | | Accessibility: | Remote | | Severity: | High | | Author: | Wolfgang Hotwagner AIT...
PT-2021-11085
Name of the Vulnerable Software and Affected Versions: qcubed versions 3.1.1 and earlier Description: A SQL injection issue allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request to the profile.php file, specifically via the strQuery parameter...
Matthias Van Woensel qcubed 跨站脚本漏洞
Matthias Van Woensel qcubed is an application by Matthias Van Woensel. It provides a PHP model-view-controller framework for rapid application development. A cross-site scripting vulnerability exists in qcubed all versions including 3.1.1 that could allow an unauthenticated attacker to steal...
WordPress Simple Social Buttons 3.1.1 Cross Site Scripting
The WordPress plugin Simple Social Buttons version 3.1.1 a.k.a. Simple Social Media Share Buttons suffers from a reflected cross-site scripting vulnerability found by Mr.F. It was fixed in version 3.2.0: https://wordpress.org/plugins/simple-social-buttons/developers HTML POC: xss poc...
ClamXAV Data Forgery Issue Vulnerability
ClamXAV is a very powerful Mac antivirus program on the Mac os platform from the UK's clamxav. ClamXav for Mac not only scans for malware, but also performs real-time virus checking for your Mac, using the very popular ClamAV's open-source antivirus engine as a backend, and has the ability to...
GHSA-HG7C-66FF-9Q8G Sandbox bypass in constantinople
constantinople before 3.1.1 affected by a sandbox bypass...
Froala WYSIWYG HTML Editor Cross-Site Scripting Vulnerability
Froala WYSIWYG HTML Editor is a U.S. Froala company's Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in Froala WYSIWYG HTML Editor versions 3.0.6 through 3.1.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. A...
ZyXEL CloudCNM SecuManager Hardcoded Password Vulnerability
ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from...
ZyXEL CloudCNM SecuManager Trust Management Issues Vulnerability
ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. No detailed...
Unspecified Vulnerability in ZyXEL CloudCNM SecuManager
ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from...
ZyXEL CloudCNM SecuManager Trust Management Issues Vulnerability
ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which...
ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36758)
ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...
CVE-2020-15321
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account...
CVE-2020-15320
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account...
