CVE-2021-43181

In JetBrains Hub before 2021.1.13690, stored XSS is possible...

Information disclosure

In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible...

Cross site scripting

In JetBrains Hub before 2021.1.13690, stored XSS is possible...

CVE-2021-43183

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed...

CVE-2021-43183

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed...

Authentication flaw

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed...

CVE-2021-43183

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed...

CVE-2021-43180

In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible...

CVE-2021-43180

JetBrains Hub prior to version 2021.1.13690 is affected by CVE-2021-43180 where information is disclosed via avatar metadata. The issue is documented across multiple sources (NVD, Red Hat RH: CVE-2021-43180; CNVD; CVELIST) and is acknowledged in the JetBrains Security Bulletin Q3 2021 as HUB-1015...

CVE-2021-43182

CVE-2021-43182 affects JetBrains Hub prior to version 2021.1.13415, where a denial-of-service condition can be triggered by processing user information. Related sources (Red Hat, CNVD, NVD mirrors) describe the issue consistently as a DoS vulnerability in Hub. The NVD entry lists a CVSS v3.1 base...

CVE-2021-43182

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

CVE-2021-43181

In JetBrains Hub before 2021.1.13690, stored XSS is possible...

CVE-2021-43181

JetBrains Hub prior to version 2021.1.13690 is affected by CVE-2021-43181 due to a stored XSS vulnerability. Descriptions across sources (NVD, Red Hat, CNVD) indicate an attacker could insert malicious code via stored XSS in Hub, with JetBrains noting the issue as fixed in 2021.1.13690 per the Je...

CVE-2021-43183

CVE-2021-43183 affects JetBrains Hub prior to 2021.1.13690. The issue is a bypass of the authentication throttling mechanism, allowing bypass of authentication restrictions. Impact is described as enabling bypass of authentication controls; exact exploitation details are not provided in the docum...

CVE-2021-43183

In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed...

Windows Feedback Hub Elevation of Privilege Vulnerability

...

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: November 9, 2021 (KB5007275)

None None...

Compromised Docker Hub Accounts Abused for Cryptomining Linked to TeamTNT

In October 2021, we observed threat actors targeting poorly configured servers with exposed Docker REST APIs by spinning up containers from images that execute malicious scripts...

Microsoft Windows Feedback Hub 权限许可和访问控制问题漏洞

Microsoft Windows Feedback Hub is a Windows general purpose application from Microsoft Corporation USA designed to allow users to provide feedback, feature suggestions, and bug reports for the operating system. Microsoft Windows Feedback Hub is vulnerable to privilege permission and access contro...