PT-2021-5043 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows NTFS file system, allowing remote attackers to execute arbitrary code using a specially crafted request. Thi...

PT-2021-5014 · Microsoft · Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Client affected versions not specified Description: The vulnerability is related to incorrect code generation management in the Remote Desktop Client component of the Windows operating system. It allows remote attacke...

PT-2021-4807 · Microsoft · Access +1

Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to incorrect code generation management in a Microsoft Access component, which is part of Microsoft Office and Microsoft 365 Apps. This can be exploited by a...

Cisco Small Business 输入验证错误漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business switch An input validation error vulnerability exists, which results from improper validation of HTTP requests on a web management page. An attacker could exploit this vulnerability to cause dos by sending a crafted HTTP request to...

openSUSE 15 Security Update : apache2 (openSUSE-SU-2021:1438-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1438-1 advisory. - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier...

OPENSUSE-SU-2021:1438-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. bsc1190702 - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious inpu...

FortiPortal - XSS vulnerability

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid...

CLSA-2021-1635458969 Fix CVE(s): CVE-2021-40438, CVE-2021-34798, CVE-2021-39275

SECURITY UPDATE: Buffer overflow with crafted input - debian/patches/CVE-2021-39275.patch:apescapequotes may write beyond the end of a buffer when given malicious input - CVE-2021-39275 SECURITY UPDATE: Malformed requests may cause the server to dereference a NULL pointer -...

CVE-2021-34762 Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to...

Denial Of Service (DoS)

github.com/ethereum/go-ethereum is vulnerable to denial of service. An attacker is able to exploit the vulnerability by sending a maliciously crafted request, causing the system to crash...

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

Race condition

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

Out-of-bounds

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

CVE-2020-23042

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

Cross site scripting

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

Huawei FusionCube 路径遍历漏洞

Huawei FusionCube is a simplified, efficient and reliable mixed workload solution for branch offices from Huawei, China. A path traversal vulnerability exists in the Huawei FusionCube product, which is caused by an input validation error when the program handles a directory traversal sequence, an...

CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

RHEL 7 : httpd (RHSA-2021:3856)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3856 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modproxy: SSRF via a...