CVE-2021-41579

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicious els project file and use the play feature, then the attacker can bypass a consent popup and write arbitrary files to OS locations where the user has...

CVE-2021-39896

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues...

CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

DEBIAN-CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

UBUNTU-CVE-2021-41867

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...

CVE-2021-41867

The CVE-2021-41867 issue affects OnionShare 2.3 prior to 2.4, where the --chat feature allows remote unauthenticated attackers to disclose the full participant list of a non-public OnionShare node. The root cause is an information-disclosure vulnerability in OnionShare’s chat functionality. Pract...

Gclib 缓冲区错误漏洞

Gclib is a C library. genome of reusable code for bioinformatics projects. a security vulnerability exists in GCLib, which could be exploited by an attacker to cause segmentation errors or possibly have unspecified other effects via a crafted GFF file...

GitLab 授权问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab EE,...

OnionShare 安全漏洞

OnionShare is an open source tool used to securely and anonymously share files, host websites, and chat with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a security vulnerability that could ...

Telegram 安全漏洞

Telegram is an instant messaging mobile application. A security vulnerability exists in the Telegram applications 7.5.0 through 7.8.0 that stems from a misleading UI indication that an image has been deleted on both the sender's and receiver's sides after using the self-destruct feature...

GitLab 访问控制错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view the contents of a project's files, commit history, bug lists, and more. GitLab suffers from an Access Control Error...

Directory traversal

Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter...

CVE-2020-12030

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway...

CVE-2020-12030

There is a flaw in the code used to configure the internal gateway firewall when the gateway's VLAN feature is enabled. If a user enables the VLAN setting, the internal gateway firewall becomes disabled resulting in exposure of all ports used by the gateway...

DRUPAL-CONTRIB-2021-042

Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field. It does not sufficiently sanitize user input. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create or edit an entity bund...

Dell SupportAssist Client Consumer Arbitrary File Deletion Vulnerability

Dell SupportAssist Client is a client application from Dell of America DELL. The program provides automated, proactive and predictive techniques for troubleshooting, etc. An arbitrary file deletion vulnerability exists in Dell SupportAssist Client Consumer 3.9.13.0 and prior versions. An attacker...

Siemens Solid Edge Post-release Reuse Vulnerability (CNVD-2021-75894)

Siemens Solid Edge, a 3D CAD, parametric feature and synchronous technology solid modeling software, is vulnerable to a post-release reuse vulnerability when parsing OBJ files in versions prior to Siemens Solid Edge SE2021MP8. An attacker could exploit this vulnerability to execute code in the...