10773 matches found
CVE-2020-24363
creationtimestamp| type| source ---|---|--- 2021-03-13 17:04:17+00:00| exploited| https://t.me/CyberSecurityTechnologies/2160 2025-09-02 16:04:24+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lxuim5nh3f2r 2025-09-02 16:14:40+00:00| seen|...
Regular Expression Denial Of Service (ReDoS)
jspdf is vulnerable to regular expression denial of service. The vulnerability exists because it does not properly handle the regular expression for input image info extractedInfo in the function addImage , causing an application crash...
NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2021-0018)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition...
EulerOS Virtualization 2.9.1 : httpd (EulerOS-SA-2021-1602)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge...
CVE-2021-21181
Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
Design/Logic Flaw
Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
CVE-2021-21181
CVE-2021-21181 is a side-channel information leakage vulnerability in Chrome Autofill. The connected Debian security advisories confirm this CVE among a chromium set and state that fixes are available in Chrome 89.x (mitigated in Debian packages as 89.0.4389.114 and later). The Astra Linux bullet...
CVE-2021-21173
Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PYSEC-2021-43
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Gener...
CVE-2021-28039
creationtimestamp| type| source ---|---|--- 2021-03-05 20:47:59+00:00| seen| https://t.me/cibsecurity/24544...
OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2021-21331 DataDog API Client contains a Local Information Disclosure Vulnerability
The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client. The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive...
Cisco Content Security Management Appliance Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is bei...
PT-2021-8267 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76: mt7915 component in the Linux kernel, where a vulnerability was resolved by properly checking rate info to fix unexpected reporting. The vulnerability...
UBUNTU-CVE-2021-25284
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...
PYSEC-2021-53
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...
CVE-2021-25284
An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level...
CVE-2021-24084
creationtimestamp| type| source ---|---|--- 2021-02-26 02:38:30+00:00| seen| https://t.me/cibsecurity/24169 2021-11-26 20:17:37+00:00| published-proof-of-concept| Telegram/ZgrYaKfoWxLUgzZDTo8GaEF-rvAT9lk-J3ogZvhycztJVHH 2021-11-28 12:01:28+00:00| seen| https://t.me/ctinow/43023 2021-11-28...
Saltstack SaltStack Salt 安全漏洞
SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to Salt 3002.5 that stems from the ability to log...