13083 matches found
思科 Cisco IOS XE Software 安全漏洞
Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from insufficient...
CVE-2021-20222
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2021-20222
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
File Upload Vulnerability in TongWeb Management Console
TongWeb is a J2EE-compliant application server product . A file upload vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...
PT-2021-13851 · Red Hat · Keycloak
Name of the Vulnerable Software and Affected Versions: keycloak affected versions not specified Description: A flaw was found in the new account console of keycloak, allowing malicious code to be executed using the referrer URL. The highest threat from this issue is to data confidentiality and...
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4751-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4751-1 advisory. It was discovered that the console keyboard driver in the Linux kernel contained a race condition. A local attacker could use this to expose sensitive...
Stored XSS Vulnerability in TongWeb Management Console at Beijing Orientop Technology Co.
TongWeb is an application server from Beijing Orientop Technology Co. A stored XSS vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information such as user cookies...
Information Disclosure
cloud-init is vulnerable to Information Disclosure. When a user specified configuration which would generate random passwords for users, cloud-init causes those passwords to be written to the serial console by emitting them on stderr. In the default configuration, any stdout or stderr emitted by...
GHSA-3WJ8-VP9H-RM6M total.js Remote Code Execution Vulnerability
total.js is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. It can be used as web, desktop, service or IoT application. Affected versions of this package are vulnerable to Remote Code Execution RCE via set. PoC js // To be ru...
Unauthorized Access Vulnerability in TongWeb Management Console of Beijing Orientop Technology Co.
TongWeb is an application server from Beijing Orientop Technology Co. An unauthorized access vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...
Unsupported license deployment alarm in Veeam Service Provider Console
Challenge Veeam Service Provider Console displays the alarm: Unsupported license deployment. Shared license key Copy The Alarm Description states: The same license ID has been detected for the backups servers: Copy Cause This alarm occurs when the same license is detected as having been installed...
kernel: use-after-free in read in vt_do_kdgkb_ioctl
A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality...
kernel: use-after-free in read in vt_do_kdgkb_ioctl
A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality...
Managed Veeam Backup Agents are offline after Veeam Service Provider Console upgrade
Challenge After upgrading Veeam Service Provider Console, all Veeam Management Agents are listed as offline. Cause This may be caused by an incorrect security certificate configuration, which leads to the disconnection of the management agent on the Veeam Cloud Connect server after the upgrade. S...
Eclipse Theia Cross-Site Scripting Vulnerability
Eclipse Theia is the Eclipse Foundation's set of Visual Studio Code-based open source integrated development environment for desktop and Web applications framework. A cross-site scripting vulnerability exists in Eclipse Theia 1.8.0 and prior versions, which stems from the absence of HTML escaping...
Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)
A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...
Weak Password Vulnerability in KEDACOM Network Keyboard Console at Suzhou KEDA Technology Co.
Ltd. is a provider of video and security products and solutions. A weak password vulnerability exists in the KEDACOM Network Keyboard Console of Suzhou KEDA Technology Company Limited, which can be exploited by attackers to obtain sensitive information...
Veeam Service Provider Console v5 Patch 2
This patch has been superseded by Veeam Service Provider Console v5 Patch 3. Requirements Please confirm you are running version5.0.0.6726 or later before installing Patch 2. You can check this by logging in to the backup portal and navigating to the Configuration Support Information tab. After...
