The vulnerability of the Oauth extension for the software environment used to implement the MediaWiki hypertext environment allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Oauth extension MWOAuthConsumerSubmitControl.php of the MediaWiki software arises from the use of cryptographic algorithms that contain defects or risks. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the Akkadian Provisioning Manager Engine lies in its lack of measures to neutralize special elements used in the operating system command line. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Akkadian Provisioning Manager Engine exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

The vulnerability of Dolibarr’s system for planning enterprise resources and managing customer relationships is related to lack of access control. This allows attackers to compromise the integrity of the protected information.

The vulnerability of Dolibarr’s system for resource planning and managing relationships with customers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected information...

PT-2021-6485 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.0 and later Description: The issue is related to the ability of an unauthorized user to insert metadata when creating a new issue. This allows a remote attacker to impact data integrity. Recommendations: For GitLab...

Oracle Linux 8 : postgresql:10 (ELSA-2021-2361)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2361 advisory. 10.17-1 - Update to 10.17 Resolves: 1964520 Fix: CVE-2021-32027, CVE-2021-32028 Tenable has extracted the preceding description block directly from the...

wildfly-core: Invalid Sensitivity Classification of Vault Expression

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...

wildfly-core: Invalid Sensitivity Classification of Vault Expression

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...

wildfly-core: Invalid Sensitivity Classification of Vault Expression

A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly...

CVE-2021-40490

A flaw was found in the Linux kernel. A race condition was discovered in the ext4 subsystem. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation Mitigation for this issue is either not available or the currently available...

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

Photon OS 1.0: Dnsmasq PHSA-2021-1.0-0431

An update of the dnsmasq package has been released. - A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by...

The vulnerability of the Photo Station photo storage application lies in the improper restriction on the path to the restricted catalog. This allows a violator to compromise the integrity of the data.

The vulnerability of the Photo Station photo storage application lies in improper restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

Aruba Networks ArubaOS Operating System Command Injection Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability stems from multiple vulnerabilities identified in Aruba products. The vulnerabilities could be exploited by an...

EulerOS 2.0 SP5 : rpm (EulerOS-SA-2021-2346)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to...

EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-2347)

According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this h...

The vulnerability of the Photo Station photo storage application lies in the improper restriction on the path to the restricted catalog. This allows a violator to compromise the integrity of the data.

The vulnerability of the Photo Station photo storage application lies in improper restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2021-2323)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-2347)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2021-2338)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...