11946 matches found
CVE-2021-43439
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...
CVE-2021-43439
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...
Command injection
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...
CVE-2021-43439
RCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely...
CVE-2021-43439
CVE-2021-43439 : RCE in the Add Review Function of iResturant 1.0 allows a remote attacker to execute commands. The NVD entry lists CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and high confidentiality/integrity/availability impact. Connected documents provide cont...
Fix of CVE: CVE-2021-43527
CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS - Update to CKBI 2.50 from NSS 3.67 - Removing: - Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - Certificate "AddTrust Low-Value Services Root" - Certificate "AddTrust...
MartDevelopers iResturant 跨站脚本漏洞
MartDevelopers iResturant is an open source lightweight restaurant Erp from MartDevelopers Kenya, designed to integrate social restaurant operations into a single system. A cross-site scripting vulnerability exists in version 1.0 of MartDevelopers iRestaurant, which stems from a lack of filtering...
Solidus 跨站请求伪造漏洞
Solidus is an open source e-commerce system. A cross-site request forgery vulnerability exists in Solidus that stems from a lack of validation in the Add to cart operation. The vulnerability allows a malicious site to add items to a user's shopping cart without the user's knowledge...
NFTXStakingZap Performs A Dangerous Equality Check Which Can Brick Contract
Handle leastwood Vulnerability details Impact NFTXStakingZap provides an interface for users to interact with NFTX vaults by adding ERC1155/ERC721 tokens as liquidity. The addLiquidity721WETH and addLiquidity1155WETH functions perform strict equality checks on the vaults balance for the...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
Design/Logic Flaw
DISPUTED The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
CVE-2021-45099
The vulnerability concerns the Home Assistant Community Add-on: SSH & Web Terminal (addon-ssh) prior to version 10.0.0 via the addon.stdin service. Root cause per sources is an attack surface that relies on social engineering; the vendor disputes this as a vulnerability, and addon.stdin was remov...
CVE-2021-45099
The addon.stdin service in addon-ssh aka Home Assistant Community Add-on: SSH & Web Terminal before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against...
Home Assistant 安全漏洞
Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. A security vulnerability exists in Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0. There is no information about this vulnerability at...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...
CVE-2021-45017
Cross Site Request Forgery CSRF vulnerability exits in Catfish =6.1. when you upload an html file containing CSRF on the website that uses a google editor; you can specify the menu url address as your malicious url address in the Add Menu column...