CVE-2021-25657

CVE-2021-25657 describes a local privilege-escalation vulnerability in Avaya IP Office Admin Lite and USB Creator, affecting version 11.1 Feature Pack 2 Service Pack 1 and earlier. The documented impact is that a local user may escalate privileges. The CVSS metrics in the sources flag high impact...

Avaya IP Office 安全漏洞

Avaya IP Office is a small business phone system from Avaya, Inc. in the United States. A security vulnerability exists in Avaya IP Office 11.1 FP2 SP1 and prior versions, which stems from Admin Lite and USB Creator allowing local users to elevate privileges...

Regular Expression Denial Of Service (ReDoS)

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method...

@outfoxx/sunday (1.1.0-alpha.19) potentially affected by CVE-2021-43309 via uri-template-lite (22.1.0)

uri-template-lite NPM version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on uri-template-lite and may be impacted: - @outfoxx/sunday 1.1.0-alpha.19 Source cves: CVE-2021-43309 Source advisory: OSV:GHSA-CHW2-6C7R-37P7...

GHSA-CHW2-6C7R-37P7 uri-template-lite Regular Expression Denial of Service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

CVE-2021-43309

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

CVE-2021-43309

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

Design/Logic Flaw

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

CVE-2021-43309 ReDoS in uri-template-lite URI.expand function

An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package, when an attacker is able to supply arbitrary input to the "URI.expand" method...

CVE-2021-43309

CVE-2021-43309 affects the uri-template-lite npm package. The root cause is an insecure regular expression (expandRe) in index.js used by URI.expand, enabling exponential ReDoS when attacker-controlled input is supplied. Impact is denial of service affecting availability. Public exploit details a...

PT-2022-11821 · Npm · Uri-Template-Lite

Name of the Vulnerable Software and Affected Versions: uri-template-lite npm package affected versions not specified Description: An exponential ReDoS Regular Expression Denial of Service can be triggered in the uri-template-lite npm package when an attacker is able to supply arbitrary input to t...

CVE-2022-35242

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin = 3.4.1 at WordPress...

Code injection

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin = 3.4.1 at WordPress...

CVE-2022-35242 WordPress THE Leads Management System: 59sec LITE plugin <= 3.4.1 - Unauthenticated plugin settings change vulnerability

Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin = 3.4.1 at WordPress...

CVE-2022-35242

CVE-2022-35242 affects the WordPress plugin 59sec LITE (THE Leads Management System) version

WordPress plugin 59sec LITE 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2022-22649 · 59Sec · 59Sec Lite

Name of the Vulnerable Software and Affected Versions: 59sec THE Leads Management System: 59sec LITE plugin version 3.4.1 and earlier Description: The issue allows for unauthenticated changes to plugin settings. Recommendations: For 59sec LITE plugin version 3.4.1 and earlier, update to a version...

SUSE SLED12 / SLES12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2022:2836-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2836-1 advisory. Updated to version 2022.5.17 bsc1199978: - CVE-2022-30783: Fixed an issue where messages between NTFS-3G and t...

SUSE-SU-2022:2836-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: Updated to version 2022.5.17 bsc1199978: - CVE-2022-30783: Fixed an issue where messages between NTFS-3G and the kernel could be intercepted when using libfuse-lite. - CVE-2022-30784: Fixed a memory exhaustion issue when opening a craft...

SUSE-SU-2022:2835-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: Updated to version 2022.5.17 bsc1199978: - CVE-2022-30783: Fixed an issue where messages between NTFS-3G and the kernel could be intercepted when using libfuse-lite. - CVE-2022-30784: Fixed a memory exhaustion issue when opening a craft...