CVE-2021-36371

CVE-2021-36371 is reported for Emissary-Ingress (formerly Ambassador API Gateway). The vulnerability allows bypassing client certificate requirements (mTLS cert_required) on backend upstreams when more than one TLSContext exists and any configuration does not require client cert authentication. T...

CVE-2021-29730

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164...

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.

...

WordPress 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress Ninja Team Video Downloader for TikTok that allows an...

seacms V210530 Backend Command Execution Vulnerability Vulnerability

Ocean CMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. seacms V210530 Command Execution Vulnerability Vulnerability exists in the backend. An attacker can exploit this...

CVE-2020-4902

IBM Datacap Taskmaster Capture IBM Datacap Navigator 9.1.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045...

UBUNTU-CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co. Ltd (CNVD-2021-49118)

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. There is a SQL injection vulnerability in the background management system of Chongqing Softfox Information Technology Co., Ltd's employment service,...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co. Ltd (CNVD-2021-49529)

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. SQL injection vulnerability exists in the background management system of employment service of Chongqing Softfox Information Technology Co., Ltd, whi...

Weak Password Vulnerability in HP LaserJet M605

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer equipment, printing equipment, imaging equipment, electronic products, and related parts and components of the above products. A weak password vulnerability exists in the HP LaserJet M605, which can be...

Weak Password Vulnerability in Pacom 8501 Input/Output Module

Pacom is a Swedish company. A weak password vulnerability exists in the Pacom 8501 Input/Output Module, which can be exploited by an attacker to gain access to the backend and obtain sensitive information...

Unauthorized access vulnerability in Isha's back-office management system

Isha Backend Management System is a .NET Core Web-based development system. An unauthorized access vulnerability exists in Yisha Backend Management System, which can be exploited by attackers to obtain sensitive information...

curl: Use-after-free in TLS session handling when using OpenSSL TLS backend

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly,...

curl: Inferior OCSP verification

Libcurl offers "OCSP stapling" via the CURLOPTSSLVERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-stat...

curl: Use-after-free in TLS session handling when using OpenSSL TLS backend

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly,...

CVE-2021-32612

The VeryFitPro com.veryfit2hr.second application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing...

Default credentials

The VeryFitPro com.veryfit2hr.second application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...