10802 matches found
CVE-2021-38712
Affected product: OneNav 0.9.12. Vulnerability: information disclosure of the onenav.db3 contents. The provided documents do not specify the exact root cause or exploited components beyond this disclosure. Impact: exposes database contents; no other impacts are detailed. Remediation / mitigation:...
CVE-2020-18754
The CVE-2020-18754 entry concerns Dut Computer Control Engineering Co.’s PLC MAC1100. Connected sources confirm an information disclosure vulnerability in the MAC1100 PLC, enabling remote access to control code or sensitive information. CNVD/CNNVD describe the impact as the ability for an attacke...
AZL-6574 CVE-2021-3573 affecting package kernel for versions less than 5.10.78.1-1
A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in AikCms 2.0.0 in videolist.php, which can let a malicious user delete movie information...
CVE-2021-36938
CVE-2021-36938 affects the Windows Cryptographic Primitives Library and is described as a Windows information-disclosure vulnerability. The available sources identify a vulnerability in the Windows Cryptographic Primitives Library with a CONFIDENTIALITY impact (HIGH per CVSS 3.1) and MEDIUM overa...
CVE-2021-36942
Windows LSA Spoofing Vulnerability Recent assessments: jbaines-r7 at January 25, 2022 4:35pm UTC reported: Recently, I was attempting to combine James Forshaw’s remote EFSRPC file write “bug” with a local privilege escalation that I’d discovered. I was getting strange results. Working on one...
Security update for SUSE Manager Client Tools (moderate)
openSUSE Security Update: Security update for SUSE Manager Client Tools Announcement ID: openSUSE-SU-2021:2675-1 Rating: moderate References: 1175478 1186242 1186508 1186581 1186650 1188846 SLE-18254 Cross-References: CVE-2021-27962 CVE-2021-28146 CVE-2021-28147 CVE-2021-28148 CVE-2021-29622 CVSS...
PT-2021-22240 · Rengine · Rengine
Name of the Vulnerable Software and Affected Versions: reNgine versions 0.5 and earlier Description: The issue is related to reNgine relying on a predictable directory name. Recommendations: For versions 0.5 and earlier, consider renaming or randomizing directory names to mitigate the risk of...
CVE-2021-38590
CVE-2021-38590 affects cPanel before 96.0.8 where weak permissions on web statistics can lead to information disclosure (SEC-584). The vulnerability is caused by insufficient access controls on web stats, enabling local attackers to read information that should be restricted. Impact is informatio...
Oracle Linux 8 : nodejs:14 (ELSA-2021-3074)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3074 advisory. - Resolves CVE-2021-22918libuv, use system cipher list Tenable has extracted the preceding description block directly from the Oracle Linux security...
openSUSE 15 Security Update : nodejs8 (openSUSE-SU-2021:1113-1)
"The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1113-1 advisory. - This affects the package y18n before 3.2.2, 4.0.1 and 5.0.5. PoC by po6ix: const y18n = require'y18n' %NASLMINLEVEL 70300 C Tenable...
CentOS 8 : nodejs:12 (CESA-2021:3073)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3073 advisory. - libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 - nodejs-hosted-git-info: Regular Expression...
nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl()
A regular expression denial of service vulnerability was found in hosted-git-info. If an application allows user input into the affected regular expression regexp function, shortcutMatch or fromUrl, then an attacker could craft a regexp which takes an ever increasing amount of time to process,...
nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl()
A regular expression denial of service vulnerability was found in hosted-git-info. If an application allows user input into the affected regular expression regexp function, shortcutMatch or fromUrl, then an attacker could craft a regexp which takes an ever increasing amount of time to process,...
The vulnerability of the Page Info UI component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Page Info UI component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created web page...
TPM Firmware August 2021 Security Update
Nuvoton has informed HP of a potential security vulnerability identified in certain versions of the Nuvoton NPCT75x TPM firmware which may allow information disclosure. Nuvoton has released firmware to mitigation this potential vulnerability. Nuvoton has released updates to mitigate the potential...
PT-2021-8826 · Sap · Sap J2Ee Engine
Name of the Vulnerable Software and Affected Versions: SAP J2EE Engine/7.01/Fiori affected versions not specified Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script via the sys jdbc parameter to "/TestJDBC Web/test2". This issue only affects...
CVE-2021-38203
btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service deadlock via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system spaceinfo...