CVE-2021-33691

The CVE-2021-33691 issue affects SAP NetWeaver Development Infrastructure (NWDI) Notification Service, specifically versions 7.31, 7.40, and 7.50. The root cause is insufficient encoding of user-supplied inputs, which enables Cross-Site Scripting (XSS). A threat actor could send crafted scripts t...

CVE-2021-33690

SAP NetWeaver Development Infrastructure Component Build Service (NWDI Build Service) versions 7.11–7.50 are affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue allows an attacker with server access to perform proxy requests, potentially exposing sensitive data and affecting...

Siemens IFC adapter in NX use after release vulnerability

NX software is an integrated toolset that helps develop design, simulation and manufacturing solutions by supporting all aspects of product development. A use-after-release vulnerability exists in Siemens IFC adapter in NX, which can be exploited by an attacker to execute code in the context of t...

CVE-2021-33690: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

Citrix Systems Citrix ShareFile security vulnerabilities

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems USA. A security vulnerability exists in Citrix ShareFile Storage Zones, which arises from an improper design or implementation during code development for a network system or product...

nodejs-tmpl security vulnerability

nodejs is a JavaScript runtime environment based on the ChromeV8 engine, by packaging the Chromev8 engine and the use of event-driven and non-blocking IO applications make it possible to develop high-performance background applications in Javascript. A security vulnerability exists in nodejs-tmpl...

Pi-Hole Adminlte Security Vulnerability

Pi-Hole Adminlte is a Pi-Hole control panel. It is used for statistical More... Pi-Hole Adminlte has a security vulnerability that originates from an improperly designed or implemented code development process for a networked system or product...

Vim buffer error vulnerability

Vim is an editor for UNIX-based platforms. A security vulnerability exists in vim that arises from an improperly designed or implemented code development process for a networked system or product...

CVE-2021-23051

On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP on Amazon Web Services AWS systems, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This is due to an incomplete fix for...

Apport path traversal vulnerability

Apport is a toolkit for collecting and feeding back error messages information that the operating system finds useful when an application crashes. Apport has a security vulnerability that arises from an improperly designed or implemented code development process for a networked system or product...

SAP NZDT SQL Injection Vulnerability

SAP NZDT is a conversion of SAP S/4HANA 1809 to AWS by SAP Germany. SAP NZDT suffers from a SQL injection vulnerability that originates from an improperly designed or implemented code development process for a network system or product...

Update of kernel, kernel-debug-devel, kernel-devel, kernel-debug, kernel-debug-devel, python-perf, perf, kernel-headers

...

Samsung NPU driver code-related vulnerabilities

Samsung NPU driver is a neural network processor from Samsung South Korea. A security vulnerability exists in Samsung NPU driver, which arises from improper design or implementation during code development of a networked system or product...

Samsung SMR security vulnerabilities

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. The patch program is provided for Samsung cell phone applications. SAMSUNG SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked syst...

Samsung SMR security vulnerabilities

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from an improperly designed or implemented code development process for a networked system or...

Samsung SMR input validation error vulnerability

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. Samsung SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked system or product...

Samsung SMR buffer error vulnerability

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. Samsung SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked system or product...

Samsung Mobile Device Buffer Error Vulnerability

Samsung Mobile Device is a series of mobile smart devices from Samsung, a South Korean company. A security vulnerability exists in the Samsung Mobile Device, which arises from an improperly designed or implemented network system or product code development process...

Samsung Mobile Device Code Issues and Vulnerabilities

Samsung Mobile Device is a series of mobile smart devices from Samsung, a South Korean company. A security vulnerability exists in Samsung Mobile Device, which arises from an improper design or implementation of a networked system or product code development process...

OwnCloud code issues and vulnerabilities

Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. A code issue vulnerability exists in owncloud that arises from improper design or implementation during code development of a networked system or product...