GHSA-3PQX-4FQF-J49F Deserialization of Untrusted Data in PyYAML

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

CVE-2021-3038 GlobalProtect App: Windows VPN kernel driver denial of service (DoS)

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

CVE-2021-29427

In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve specific dependencies...

PT-2021-18203 · Gradle · Gradle

Name of the Vulnerable Software and Affected Versions: Gradle versions 5.1 through 6.x Description: The issue can lead to information disclosure and/or dependency poisoning due to Gradle ignoring content filters and searching all repositories for dependencies when repository content filtering is...

BeyongCMS suffers from file upload vulnerability (CNVD-2021-26005)

BeyongCMS is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCMS, which can be exploited by attackers to gain control of the server...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

SeedDMS 跨站请求伪造漏洞

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditDocument.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

CVE-2020-4891

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account lockout setting that could allow a local user er to brute force Rest API account credentials. IBM X-Force ID: 190974...

Squid Information Disclosure Vulnerability (SQUID-2020:12)

Squid is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Arbitrary File Deletion Vulnerability in RGCMS Backend

RGCMS is an open source building management system, written in PHP with a Thinkphp 5.1 framework. RGCMS backend exists arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete sensitive files in the website...

Nut/OS Denial of Service and Remote Code Execution Vulnerability (CNVD-2021-19758)

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from a failure to check if a domain name ends in '0'. An attacker cou...

Nut/OS Denial of Service and Remote Code Execution Vulnerability (CNVD-2021-19760)

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from not checking the number of DNS queries/responses against availab...

Nut/OS Denial of Service and Remote Code Execution Vulnerabilities

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from using the length byte of a domain name in a DNS query/response f...

CVE-2020-25109

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses set in a DNS header is not checked against the data present. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25108

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked it can be set to an arbitrary value from a packet. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...