Design/Logic Flaw

Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows...

The vulnerability of configuration files for the DLT journaling tool, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of configuration files for the DLT journaling tool is related to the improper processing of special symbols. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Palo Alto Networks PAN-OS 代码问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that arises from the use of a network system or component that has been used with an unreasonable file configuration,...

Tecknodreams SapphireIMS Default Configuration Issue Vulnerability

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A default configuration issue vulnerability exists in Tecknodreams SapphireIMS version 5.0, which stems from the use of default sapphire:ims credentials to connect clients to the...

CVE-2021-2395

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: iCare, Configuration. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data.

The vulnerability of the Ansible configuration management system is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from an insecure XPC servic...

Information disclosure

UNSUPPORTED WHEN ASSIGNED An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available ...

The vulnerability in the firewall filter configuration of Junos OS operating systems for MX series routers, PTX10003, and PTX10008, which allows a hacker to trigger a service failure.

The vulnerability of the firewall filter configuration in Junos OS operating systems for MX series routers, PTX10003, and PTX10008, relates to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions remotely...

Automatic room upgrade handling can be used maliciously to bridge a room non-consentually

Impact If a bridge has room upgrade handling turned on in the configuration the roomUpgradeOpts key when instantiating a new Bridge instance., any m.room.tombstone event it encounters will be used to unbridge the current room and bridge into the target room. However, the target room m.room.create...

Schneider Electric homeLYnk and spaceLYnk Information Disclosure Vulnerability (CNVD-2021-45715)

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. Schneider Electric homeLYnk and spaceLYnk are vulnerable to an information disclosure vulnerability that could result in the program being corrupted...

Remote code execution

A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value which might contain PHP code is injected into config/configuration.php...

IBM Spectrum Scale Information Disclosure Vulnerability (CNVD-2021-37124)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

CVE-2021-28184

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

Xerox AltaLink 安全漏洞

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that allows the ability to set configuration properties without requiring administrator privileges. The following products and versions a...

CVE-2021-22506

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage...

CVE-2021-21309

Redis 32-bit builds (Redis 4.0+) are affected by an integer overflow that can cause heap corruption and, in certain conditions, remote code execution. The issue stems from a low safe limit for bulk input (default 512MB); if a client sends unusually large data and the limit is increased, overflow ...

CloudBees Jenkins Active Choices Plugin Cross-Site Scripting Vulnerability

Jenkins Active Choices is a Jenkins open source application plugin . Used in parameterized freestyle Jenkins jobs to create scripted , dynamic and interactive job parameters. A cross-site script execution vulnerability exists in Jenkins Active Choices Plugin 2.5.2 and earlier versions. The...

FiberHome HG6245D devices default configuration issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A default configuration issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to gain access to the internal management interface...

FiberHome HG6245D devices 默认配置问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. A security vulnerability exists in wifictl5g.cfg in the FiberHome HG6245D. No details of the vulnerability are provided at this time...