CVE-2021-23402

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-20752

Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary script via unspecified vectors...

PT-2021-12045 · Unknown · Uwebsockets

Name of the Vulnerable Software and Affected Versions: uWebSockets versions 18.11.0 through 18.12.0 Description: The issue is related to a stack-based buffer overflow in the uWS::TopicTree::trimTree function, which is called from uWS::TopicTree::unsubscribeAll. The vendor disputes the severity of...

JVN#65660590: boastMachine vulnerable to cross-site scripting

boastMachine provided by knadh contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Stop using "boastMachine" The developer states that the product is no longer supported, therefore stop using the product. Products...

WordPress All in One SEO Pack Plugin < 4.1.0.2 RCE Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aioseo:allinoneseo"; if description...

Arbitrary File Read Vulnerability in MyCnCart of Qingdao All-in-One Network Technology Co.

MyCnCart MCC for short is a free, open source B2C, B2B e-commerce platform system developed for the Chinese mainland market. MyCnCart has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

PT-2021-19246

Name of the Vulnerable Software and Affected Versions SIMATIC HMI Comfort Panels affected versions not specified SINAMICS SL150: All versions SINAMICS SM150: All versions SINAMICS SM150i: All versions Description The issue concerns the Telnet service of the SIMATIC HMI Comfort Panels system...

Encouraging women to embrace their cybersecurity superpowers

The cybersecurity challenges of today require a diversity of skills, perspectives, and experiences, yet women remain underrepresented in this field. On International Women’s Day, some Microsoft Security women leaders penned a powerful blog highlighting the underrepresentation of women in...

UVI-2021-1000760 x86/kvm: Disable all PV features on crash

x86/kvm: Disable all PV features on crash This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.125 by commit...

org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (1.2.1), org.eclipse.jetty.aggregate:jetty-all (7.6.2.v20120308) +53 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.6.2.v20120308)

org.eclipse.jetty:jetty-server MAVEN version 7.6.2.v20120308 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer 1.2.1 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc0) +22 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.0.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc1) +22 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.0.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

GHSA-M6CP-VXJX-65J6 SessionListener can prevent a session from being invalidated breaking logout

Impact If an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application us...

org.eclipse.jetty.aggregate:jetty-all (7.2.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.2.0.rc0) +33 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.2.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.2.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.2.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

com.github.stephenc.jetties:jetty-deb (8.1.6), com.github.stephenc.jetties:jetty-rpm (8.1.6) +50 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (8.1.6.v20120903)

org.eclipse.jetty:jetty-server MAVEN version 8.1.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.github.stephenc.jetties:jetty-deb 8.1.6 - com.github.stephenc.jetties:jetty-rpm 8.1.6...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc1) +43 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.5.0.rc1)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.cometd.java:cometd-java-examples (2.4.0.rc3), org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc5) +46 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.6.0.rc5)

org.eclipse.jetty:jetty-server MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.cometd.java:cometd-java-examples 2.4.0.rc3 - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc0) +43 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.5.0.rc0)

org.eclipse.jetty:jetty-server MAVEN version 7.5.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +29 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (7.0.0.rc3)

org.eclipse.jetty:jetty-server MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

com.azavea.geotrellis:geotrellis-jetty_2.10 (>=0.9.0-rc1, <=0.10.0-m1), com.azavea.geotrellis:geotrellis-jetty_2.11 (0.10.0-m1) +45 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (8.1.0.rc4)

org.eclipse.jetty:jetty-server MAVEN version 8.1.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.azavea.geotrellis:geotrellis-jetty2.10 =0.9.0-rc1, =0.8.0-rc2, =0.8.0 -...