org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc4), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc4) +3 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.0.0.rc4)

org.eclipse.jetty:jetty-servlets MAVEN version 7.0.0.rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc4 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.v20120127), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.v20120127) +6 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.0.v20120127)

org.eclipse.jetty:jetty-servlets MAVEN version 8.1.0.v20120127 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.v20120127 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.6.v20120903), org.eclipse.jetty.aggregate:jetty-all-server (8.1.6.v20120903) +6 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.6.v20120903)

org.eclipse.jetty:jetty-servlets MAVEN version 8.1.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.6.v20120903 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.17.v20150415), org.eclipse.jetty.aggregate:jetty-all-server (7.6.17.v20150415) +5 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.6.17.v20150415)

org.eclipse.jetty:jetty-servlets MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.17.v20150415 -...

org.apache.camel:camel-example-cxf (>=2.9.0-rc1, <=2.9.0), org.apache.camel:camel-jetty (>=2.9.0-rc1, <=2.9.0) +10 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.5.3.v20111011)

org.eclipse.jetty:jetty-servlets MAVEN version 7.5.3.v20111011 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.apache.camel:camel-example-cxf =2.9.0-rc1, =2.9.0-rc1, =1.1.5, =2.4.0.rc1 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.2.v20111006), org.eclipse.jetty.aggregate:jetty-all-server (7.5.2.v20111006) +6 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (7.5.2.v20111006)

org.eclipse.jetty:jetty-servlets MAVEN version 7.5.2.v20111006 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.2.v20111006 -...

Red Hat OpenShift Service Mesh 安全特征问题漏洞

Red Hat OpenShift Service Mesh is a suite of platforms for connecting, managing, and monitoring microservices-based applications from Red Hat USA. A security signature issue vulnerability exists in the Red Hat OpenShift Service Mesh operator that allows access to all ports on these resources from...

PT-2021-20072 · Apache · Apache Apisix Dashboard

Name of the Vulnerable Software and Affected Versions: Apache APISIX Dashboard version 2.6 Description: The issue arises from a combination of factors, including a change in the default listen host to 0.0.0.0 to facilitate external network access, the use of a risky function for IP acquisition in...

3Scale 安全漏洞

Red Hat 3Scale is a suite of API Application Programming Interface lifecycle management software from Red Hat. A security vulnerability exists in 3Scale, which originated in 3Scale.We found that all versions of the 3Scale Developer Portal lack brute force protection...

GSD-2021-1000501 RDMA/rxe: Clear all QP fields if creation failed

RDMA/rxe: Clear all QP fields if creation failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

Malicious Package

Overview @cawraytestorg/packagetest2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2021-24294

The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...

CVE-2021-24307

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...

CVE-2021-24294

The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...

Default credentials

The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...

Design/Logic Flaw

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...

CVE-2021-24307

The CVE-2021-24307 entry relates to the WordPress plugin All in One SEO Pack (versions up to 4.1.0.2). The issue allows an authenticated user with aioseo_tools_settings privileges (typically admin) to achieve remote code execution on the host. The root cause involves unserializing values from a b...

CVE-2021-24307

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...

CVE-2021-24294 DSGVO All in one for WP < 4.0 - Unauthenticated Stored Cross-Site Scripting (XSS)

The dsgvoaiowritelog AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard wp-admin/admin.php?page=dsgvoaiofree-show-log. This could allow unauthenticate...

CVE-2021-24307: Deserialization of Untrusted Data

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...