CVE-2021-22969

Concrete CMS formerly concrete5 versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS ex AWS IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading...

CVE-2021-22969

CVE-2021-22969 affects Concrete CMS (formerly concrete5) versions below 8.5.7. The vulnerability is a Server-Side Request Forgery (SSRF) mitigation bypass via a DNS Rebind attack, enabling an attacker to access cloud IAM keys (e.g., AWS) by fetching credentials. The root cause is SSRF mitigation ...

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084...

.NET Core 3.1 bugfix update

An update is available for dotnet3.1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This is the monthly update for .NET Core 3.1 for October 2021...

.NET Core 3.1 bugfix update

This is the monthly update for .NET Core 3.1 for October 2021...

Online Shopping Portal 跨站脚本漏洞

Online Shopping Portal is an open source online shopping portal by the individual developer Anuj Kumar. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from multiple cross-site scripting XSS vulnerabilities in PHPGurukul Shopping v3.1. An attacker can exploit...

News Portal Project SQL Injection Vulnerability (CNVD-2021-102010)

News Portal Project is an open source news portal project . News Portal Project in version 3.1, there is a SQL injection vulnerability , the vulnerability stems from the application's category, subcategory, sucatdescription, username parameters lack of validation of external input SQL statements...

Online Shopping Portal SQL Injection Vulnerability (CNVD-2021-103373)

Online Shopping Portal is an open source online shopping portal. A SQL injection vulnerability exists in Online Shopping Portal version 3.1, which can be exploited to execute illegal SQL commands to steal sensitive database data via the lack of validation of externally-entered SQL statements via...

PT-2021-21877 · Unknown · Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Online Shopping Portal version 3.1 Description: A security issue exists in the Online Shopping Portal, specifically an SQL Injection flaw. This issue is present in the email parameter on the "/check availability.php" endpoint, which checks if...

Online Shopping Portal SQL注入漏洞

Online Shopping Portal is an open source online shopping portal. A SQL injection vulnerability exists in Online Shopping Portal version 3.1, which can be exploited to execute illegal SQL commands to steal sensitive database data via the lack of validation of externally-entered SQL statements via...

News Portal Project SQL注入漏洞

News Portal Project is an open source news portal project . News Portal Project in version 3.1, there is a SQL injection vulnerability , the vulnerability stems from the application's category, subcategory, sucatdescription, username parameters lack of validation of external input SQL statements...

Fedora: Security Advisory for gfbgraph (FEDORA-2021-7cccd2784c)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for ncurses (openSUSE-SU-2021:3490-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2021-23839, CVE-2021-23840, and CVE-2021-23841)

Summary There are vulnerabilities in OpenSSL used by AIX. Vulnerability Details CVEID: CVE-2021-23839 DESCRIPTION: OpenSSL could provide weaker than expected security, caused by incorrect SSLv2 rollback protection that allows for the inversion of the logic during a padding check. If the server is...

Security Bulletin: Vulnerability in lpd affects AIX (CVE-2021-29693)

Summary There is a vulnerability in the lpd daemon that affects AIX. Vulnerability Details CVEID: CVE-2021-29693 DESCRIPTION: IBM AIX could allow a local user with elevated group privileges to exploit a vulnerability in the lpd daemon. CVSS Base score: 4.9 CVSS Temporal Score: See:...

CVE-2021-35647

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-35644

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-35648

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2021-35643

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-35641

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...