3813 matches found
Zope RCE Vulnerability (GHSA-g4gq-j4p2-j8fr)
Zope is prone to a remote code execution RCE vulnerability via Script Python objects under Python 3. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
dotnet5.0 bugfix update
An update for .NET 5.0 is now available for Rocky Linux. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation...
PT-2021-19944 Ā· Zope Ā· AccesscontrolĀ +1
Name of the Vulnerable Software and Affected Versions: AccessControl versions 4.0 through 4.2 AccessControl versions 5.0 through 5.1 Zope versions prior to 4.6.3 Zope versions prior to 5.3 Description: The module AccessControl defines security policies for Python code used in restricted code with...
uListing < 2.0.6 - Modify User Roles via CSRF
An Add/Edit User Roles via CSRF vulnerability was discovered in the plugin. Missing WPNonce security tokens https://codex.wordpress.org/WordPressNonces . PoC | CSRF | Add/Edit User Roles: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: cookies User-Agent: Mozilla/5.0 Content-Type:...
.NET 5.0 bugfix update
An update for .NET 5.0 is now available for Rocky Linux 8. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation...
.NET 5.0 security and bugfix update
An update for .NET 5.0 is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
SUSE: Security Advisory (SUSE-SU-2021:2439-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
.NET 5.0 bugfix update
.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fixes and Enhancements: Update .NET 5.0 to SDK 5.0.205 and Runtime 5.0.8 BZ1980412...
Cross-site Scripting (XSS) - Stored in bigprof-software/online-invoicing-system
āļø Description There is a Stored XSS in the online invoicing system view price history which is lead by adding invoice items. š„ TESTED VERSION https://github.com/bigprof-software/online-invoicing-system/releases/tag/v5.0 šµļøāāļø Proof of Concept POC Video:...
Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.7-alt1
July 1, 2021 Vitaly Lipatov 5.0.7-alt1 - ASP.NET 5.0.7 - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...
SUSE: Security Advisory (SUSE-SU-2021:2196-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-35959
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...
PYSEC-2021-110
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...
CVE-2021-35959
In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field...
Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.7-alt1
June 30, 2021 Vitaly Lipatov 5.0.7-alt1 - new version 5.0.7 with rpmrb script - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...
Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.7-alt1
June 30, 2021 Vitaly Lipatov 5.0.7-alt1 - new version 5.0.7 with rpmrb script - CVE-2021-31204: .NET Core Elevation of Privilege Vulnerability - CVE-2021-31957: ASP.NET Denial of Service Vulnerability...
Command execution vulnerability exists in HkCms (CNVD-2021-49114)
HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCms has a command execution vulnerability that can be exploited by attackers to gain control of the server...
Command Execution Vulnerability in HKCMS (CNVD-2021-48553)
HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HKCMS suffers from a command execution vulnerability, which can be exploited by an attacker to gain server privileges by writing arbitrary content to a file...
Command Execution Vulnerability in HkCMS
HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...
SUSE: Security Advisory (SUSE-SU-2021:2151-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...