Code injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32620

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32620 Users registered with email verification can self re-activate their disabled accounts

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32620

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

CVE-2021-32620

XWiki Platform contains a vulnerability (CVE-2021-32620) where a user disabled on a wiki via email verification can re-activate themselves by following the activation link. Affected versions are prior to 11.10.13, 12.6.7, and 12.10.2; it has been fixed in 11.10.13, 12.6.7, 12.10.2, and 13.0. A ma...

CVE-2021-32620: Improper Authorization

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for hi...

xwiki-platform 授权问题漏洞

Thomas Mortagne xwiki-platform is an open source application by Thomas Mortagne. A general-purpose wiki platform that provides runtime services for applications built on it. xwiki-platform suffers from an authorization issue vulnerability that stems from the fact that a user who registers using...

DEBIAN-CVE-2021-20297

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability...

CVE-2021-20297

A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability...

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation

In the plugin, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activateplugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites. $wpuser, 'pwd' = $wppass, 'rememberme' = 'forever', 'wp-submit...

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation

In the plugin, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activateplugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites. PoC $wpuser, 'pwd' = $wppass, 'rememberme' = 'forever',...

WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.3 (2.0.0 – 2.0.3) - Authenticated Wildcard Activation and Retrieval vulnerability

Authenticated Wildcard Activation and Retrieval vulnerability discovered by WordFence in WordPress Simple 301 Redirects by BetterLinks plugin versions = 2.0.3 only versions 2.0.0 – 2.0.3. Solution Update the WordPress Simple 301 Redirects by BetterLinks plugin to the latest available version at...

Apple iPadOS 代码问题漏洞

Apple iPadOS is an operating system from Apple Inc. for the iPad tablet computer. Apple iPadOS suffers from a code issue vulnerability that stems from a login issue caused by the CommCenter component. The device may accept invalid activation results, which in turn may result in a denial of servic...

About the security content of iOS 14.6 and iPadOS 14.6

About the security content of iOS 14.6 and iPadOS 14.6 This document describes the security content of iOS 14.6 and iPadOS 14.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

WordPress plugin authorization issue vulnerability (CNVD-2021-36536)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A vulnerability exists in the WordPress plugin before...

RHEL 8 : systemd (RHSA-2021:1611)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1611 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides...

XWiki users registered with email verification can self re-activate their disabled accounts

Impact A user disabled on a wiki using email verification for registration can re-activate himself by using the activation link provided for his registration. Patches The problem has been patched in the following versions of XWiki: 11.10.13, 12.6.7, 12.10.2, 13.0. Workarounds It's possible to...

GHSA-76MP-659P-RW65 XWiki users registered with email verification can self re-activate their disabled accounts

Impact A user disabled on a wiki using email verification for registration can re-activate himself by using the activation link provided for his registration. Patches The problem has been patched in the following versions of XWiki: 11.10.13, 12.6.7, 12.10.2, 13.0. Workarounds It's possible to...

NetworkManager: Profile with match.path setting triggers crash

A flaw was found in NetworkManager. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability...

Moderate: systemd security, bug fix, and enhancement update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...