Weak password vulnerability in Huawei USG2210E

The USG2210E Security Gateway is a new generation firewall/UTM appliance designed for small and medium-sized businesses/branch offices. A weak password vulnerability exists in Huawei USG2210E, which can be exploited by attackers to obtain sensitive information...

Alquist path traversal vulnerability

Alquist is an advanced conversational Ai bot used to have fun and engaging conversations with humans about popular topics such as movies, sports, news, etc. A security vulnerability exists in the AlquistManager branch. It is used to have fun and engaging conversations with humans about popular...

Lantronix PremierWave 2050 缓冲区错误漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 has a security vulnerability that could be exploited by an attacker to execute remote code in a vulnerable portion of the branch deletedir...

Directory traversal

ServerManagement master branch as of commit 49491cc6f94980e6be7791d17be947c27071eb56 is affected by a directory traversal vulnerability. This vulnerability can be used to extract credentials which can in turn be used to execute code...

CVE-2021-43492

AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system andcan significantly aid in getting remote code access...

Directory traversal

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access...

CVE-2021-43496

The CVE-2021-43496 entry concerns the Clustering project where the master branch (commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70) is affected by a directory traversal vulnerability. The connected nuclei template documents a Local File Inclusion/directory traversal flaw that can disclose sensitiv...

ServerManagement 路径遍历漏洞

ServerManagement is a server management tool. A path traversal vulnerability exists in ServerManagement that stems from a commit in the ServerManagement master branch that is affected by a directory traversal vulnerability...

Alquist 路径遍历漏洞

Alquist is an advanced conversational Ai bot used to have fun and engaging conversations with humans about popular topics such as movies, sports, news, etc. A security vulnerability exists in the AlquistManager branch. It is used to have fun and engaging conversations with humans about popular...

Clustering 路径遍历漏洞

Clustering is an open source approximate order clustering by Varun Suresh personal developer in the USA. It is used for face verification experiments. Clustering suffers from a path traversal vulnerability that stems from a commit in the main branch of Clustering being affected by a directory...

PT-2021-1522 · Arm +8 · Arm Cortex +9

Name of the Vulnerable Software and Affected Versions: Arm Cortex and Neoverse processors versions prior to 2022-03-08 Description: The issue is related to a hardware flaw that allows for cache speculation, also known as Spectre-BHB. An attacker can leverage the shared branch history in the Branc...

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptionsW+0x0000000000032850"...

DEBIAN-CVE-2021-25219

In BIND 9.3.0 - 9.11.35, 9.12.0 - 9.16.21, and versions 9.9.3-S1 - 9.11.35-S1 and 9.16.8-S1 - 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response...

Huawei FusionCube Product Path Traversal Vulnerability

Huawei FusionCube is a simplified, efficient and reliable mixed workload solution for branch offices from Huawei, China. A path traversal vulnerability exists in the Huawei FusionCube product, which is caused by an input validation error when the program handles a directory traversal sequence, an...

Snudown 加密问题漏洞

Snudown is an open source package. It is a reddit-specific branch of the Sundown Markdown parser used by GitHub, with added Python integration. Snudown has a cryptographic problem vulnerability that can be exploited by attackers to conduct DoS attacks...

PT-2021-7855 · Google · Android

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to information disclosure in the Kernel due to indirect branch misprediction. This vulnerability is associated with insufficient protection of service data during...

Debian DLA-2743-1 : amd64-microcode - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2743 advisory. It was discovered that systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an...

GitLab: IDOR in "external status check" API leaks data about any status check on the instance

Summary The API endpoint for returning approval from an external status check contains an IDOR that lets a user list information about all external status checks on the GitLab instance. The feature is an Ultimate feature, but can be accessed by starting an Ultimate trial on GitLab.com. So the...

CVE-2021-39889

In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch...

CVE-2021-39889

In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch...