CVE-2021-43589: Improper Neutralization of Special Elements used in a Command

Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system OS command injection Vulnerability. A locally authenticated user with high privileges may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands o...

Linux kernel heap buffer overflow vulnerability (CNVD-2022-68564)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a security flaw caused by an integer underflow in the legacyparseparam function in fs/fscontext.c. By sending a carefully crafted request, a locally authenticated attack...

PT-2022-15157

Name of the Vulnerable Software and Affected Versions Ivanti Workspace Control versions prior to 2021.2 10.7.30.0 Description A vulnerability exists due to insecure storage of sensitive information, potentially allowing an attacker with locally authenticated low privileges to obtain key...

Security feature bypass

Potential product security bypass vulnerability in McAfee Application and Change Control MACC prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by...

CVE-2021-31833

CVE-2021-31833 affects McAfee Application and Change Control (MACC) prior to 8.3.4. The vulnerability allows a locally logged-in attacker to bypass MACC’s solidification protection and run applications that would normally be blocked. Exploitation, as described in multiple sources, requires renami...

CVE-2021-25021

The vulnerability CVE-2021-25021 affects the WordPress plugin OMGF | Host Google Fonts Locally (versions before 4.5.12). The root cause is unvalidated cache directory settings allowing path traversal by high-privilege users, enabling deletion of arbitrary folders during uninstall. Impacts include...

CVE-2021-25020

CVE-2021-25020 affects the WordPress plugin “CAOS | Host Google Analytics Locally” (versions prior to 4.1.9). The vulnerability arises because the plugin does not validate the cache directory setting, enabling high-privilege users to perform a path traversal during uninstall and delete arbitrary ...

CVE-2021-25021: Improper Limitation of a Pathname to a Restricted Directory

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin...

CVE-2021-25020: Improper Limitation of a Pathname to a Restricted Directory

The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin...

WordPress plugin 路径遍历漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A path traversal vulnerability exists in the WordPress plugin CAOS|Host Google Fonts Locally. The vulnerability stems from the program not...

WordPress CAOS | Host Google Analytics Locally plugin <= 4.1.8 - Arbitrary Folder Deletion via Path Traversal vulnerability

Arbitrary Folder Deletion via Path Traversal vulnerability discovered by José Aguilera in WordPress CAOS | Host Google Analytics Locally plugin versions = 4.1.8. Solution Update the WordPress CAOS | Host Google Analytics Locally plugin to the latest available version at least 4.1.9...

Input validation

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. This issue affects: Juniper Networks Junos OS All versions prior to 18.3R3-S5; 18.4 versions prior to...

PT-2021-5607

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.3R3-S5 Juniper Networks Junos OS 18.4 versions prior to 18.4R3-S9 Juniper Networks Junos OS 19.1 versions prior to 19.1R3-S6 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S3 Juniper...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from an incorrect input...

CVE-2021-38863

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...

CVE-2021-38863

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154...

IBM Edge 安全漏洞

Edge is a Node.js logic and template engine that contains batteries. IBM Edge has an information disclosure vulnerability that stems from the fact that IBM Edge allows web pages to be stored locally, which can be exploited by an attacker to read those pages...

IBM Edge 安全漏洞

Edge is a Node.js logic and template engine that contains batteries. IBM Edge has an information disclosure vulnerability that stems from the fact that IBM Edge allows web pages to be stored locally, which can be exploited by an attacker to read those pages...

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...

CVE-2021-41525

An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior...