GHSA-8FJQ-CPR7-CMFP Fork CMS XSS Vulnerability

Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...

CVE-2020-21468

A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

CVE-2020-21468

A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

DEBIAN-CVE-2020-21468

A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

UBUNTU-CVE-2020-21468

DISPUTED A segmentation fault in the redis-server component of Redis 5.0.7 leads to a denial of service DOS. NOTE: the vendor cannot reproduce this issue in a released version, such as 5.0.7...

PT-2021-6491

Name of the Vulnerable Software and Affected Versions Redis versions 5.0.7 Description The issue is related to a segmentation fault in the redis-server component of Redis, which can lead to a denial of service DOS. This can be exploited by a remote attacker to cause a service disruption. The vend...

CVE-2021-35063

Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."...

Siemens Teamcenter Active Workspace 跨站脚本漏洞

Siemens Teamcenter Active Workspace is a software application from Siemens Germany. A product lifecycle management software. A cross-site scripting vulnerability exists in Teamcenter Active Workspace that originates from a detailed error message in the affected application, which could disclose...

[ASA-202106-37] aspnet-runtime: denial of service

Arch Linux Security Advisory ASA-202106-37 ========================================== Severity: Medium Date : 2021-06-15 CVE-ID : CVE-2021-31957 Package : aspnet-runtime Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2046 Summary ======= The package aspnet-runtime...

Important: Red Hat Security Advisory: .NET 5.0 security and bugfix update

An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

SCO Openserver 5.0.7 Command Injection

Exploit Title: SCO Openserver 5.0.7 - 'outputform' Command Injection Google Dork: inurl:/cgi-bin/manlist?section Discovered Date: 04/09/2020 Author: Ramikan Vendor Homepage: https://www.xinuos.com/products/ Software Link: https://www.sco.com/products/openserver507/-overview Affected Version: Test...

CVE-2020-5255

In Symfony before versions 4.4.7 and 5.0.7, when a Response does not contain a Content-Type header, affected versions of Symfony can fallback to the format defined in the Accept header of the request, leading to a possible mismatch between the response's content and Content-Type header. When the...

CVE-2020-5275

In Symfony, the security-http component had a fault in Firewall access checks prior to versions 4.4.7 and 5.0.7 where the system iterated rule attributes and stopped after the first granted attribute, bypassing remaining checks under an unanimous strategy. The issue is resolved by changing the ac...

CVE-2020-5255 Prevent cache poisoning via a Response Content-Type header

In Symfony before versions 4.4.7 and 5.0.7, when a Response does not contain a Content-Type header, affected versions of Symfony can fallback to the format defined in the Accept header of the request, leading to a possible mismatch between the response's content and Content-Type header. When the...

PT-2020-18365 · Symfony · Symfony Security Http

Name of the Vulnerable Software and Affected Versions: symfony/security-http versions 4.4.0 through 4.4.6 symfony/security-http versions 5.0.0 through 5.0.6 Description: The issue arises when a Firewall checks access control rules using the unanimous strategy. In affected versions, the Firewall...

Debian DLA-2117-1 : zsh security update

A privilege escalation vulnerability was discovered in zsh, a shell with lots of features, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted. For Debian 8 'Jessie', this problem has been fixed in version 5.0.7-5+deb8u1. We recommend...

[SECURITY] [DLA 2117-1] zsh security update

Package : zsh Version : 5.0.7-5+deb8u1 CVE ID : CVE-2019-20044 Debian Bug : 951458 A privilege escalation vulnerability was discovered in zsh, a shell with lots of features, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted. For Debia...

PT-2018-13677 · Kamailio +2 · Kamailio +2

Name of the Vulnerable Software and Affected Versions: Kamailio versions prior to 5.0.7 Kamailio versions 5.1.x prior to 5.1.4 Description: A crafted SIP message with an invalid Via header can cause a segmentation fault and crash Kamailio due to missing input validation in the crcitt string array...

CVE-2018-14767

In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "buildresbuffromsipreq" core function. This could result in denial of service and potentially...

Kamailio Segmentation Error Vulnerability

Kamailio is an open source GPL-based SIP Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany. A security vulnerability exists in Kamailio versions prior to 5.0.7 and 5.1.x prior to 5.1.4. The vulnerability can be exploited by an attacker to execute arbitrary code or...