Django SQL注入漏洞

Django is an open source web application framework , written in Python . A SQL injection vulnerability exists in Django versions 3.2.x prior to 3.2.5 and 3.1.x prior to 3.1.13. The vulnerability is related to a code flaw. querySet.orderby does not perform strict validation of data when processing...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.16-alt1

June 30, 2021 Vitaly Lipatov 3.1.16-alt1 - new version 3.1.16 with rpmrb script - .NET Core 3.1.16 and .NET Core SDK 3.1.410 - CVE-2021-31957: ASP.NET Denial of Service Vulnerability - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.16-alt1

June 30, 2021 Vitaly Lipatov 3.1.16-alt1 - new version 3.1.16 with rpmrb script - .NET Core 3.1.16 and .NET Core SDK 3.1.410 - CVE-2021-31957: ASP.NET Denial of Service Vulnerability - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.16-alt1

June 30, 2021 Vitaly Lipatov 3.1.16-alt1 - new version 3.1.16 with rpmrb script - .NET Core 3.1.16 - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability...

Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 3.1.16-alt1

June 30, 2021 Vitaly Lipatov 3.1.16-alt1 - new version 3.1.16 with rpmrb script - .NET Core 3.1.16 - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability...

CVE-2021-2322

Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1...

Design/Logic Flaw

Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1...

CVE-2021-2322

Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1...

CVE-2021-2322

Vulnerability in OpenGrok component: Web App. Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1...

CVE-2021-2322

OpenGrok Web App vulnerability CVE-2021-2322 affects OpenGrok versions 1.6.7 and earlier. Root cause per multiple sources is insecure XML deserialization leading to remote code execution and full takeover risk. Affected entries consistently cite CVSS 3.1 base score 8.8 (HIGH) with network access ...

Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)

Exploit Title: Responsive Tourism Website 3.1 - Remote Code Execution RCE Unauthenticated Date: 22.06.2021 Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14838/simple-responsive-tourism-website-using-php-free-source-code.html Version: V 3.1 Tested on: MacOS &...

Cross site scripting

Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Scriptler/Configure permission...

Jenkins Scriptler Plugin 跨站脚本漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A cross-site scripting vulnerability exists in Jenkins Scriptler Plugin 3.1 and earlier versions that stems from the...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9305)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9305 advisory. - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860493 CVE-2021-31916 - powerpc/64s: flush L1D after user accesses...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9308)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9308 advisory. - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860493 CVE-2021-31916 - powerpc/64s: flush L1D after user accesses...

[ASA-202106-38] aspnet-runtime-3.1: denial of service

Arch Linux Security Advisory ASA-202106-38 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-31957 Package : aspnet-runtime-3.1 Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2047 Summary ======= The package...

.NET Core 3.1 security and bugfix update

3.1.116-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.116-1 - Update to .NET SDK 3.1.116 and Runtime 3.1.16 - Resolves: RHBZ1965505 3.1.115-1 - Update to .NET SDK 3.1.115 and Runtime 3.1.15 - Resolves: RHBZ1954333...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2020:14588-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14588-1 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are...

SUSE: Security Advisory (SUSE-SU-2013:1152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for php-symfony3 (FEDORA-2021-c57937ab9f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...