CVE-2021-33910 affecting package systemd 239-44

CVE-2021-33910 affecting package systemd 239-44. A patched version of the package is available...

CVE-2021-22922 affecting package curl 7.76.0-9

CVE-2021-22922 affecting package curl 7.76.0-9. A patched version of the package is available...

CVE-2021-22923 affecting package curl 7.76.0-9

CVE-2021-22923 affecting package curl 7.76.0-9. A patched version of the package is available...

CVE-2021-22925 affecting package curl 7.76.0-9

CVE-2021-22925 affecting package curl 7.76.0-9. A patched version of the package is available...

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6

CVE-2021-32760 affecting package moby-containerd 1.4.4+azure-6. A patched version of the package is available...

CVE-2021-21406 Command Injection vulnerability in the Setup Wizard

Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0...

Critical SQL Injection Vulnerability Patched in WooCommerce

Update: The article originally credited Tommy DeVoss dawgyg for the discovery. Weve since been contacted by Tommy, who let us know that the credit should go to another researcher, Josh from DOS Development Operations Security On July 14, 2021, WooCommerce released an emergency patch for a SQL...

Exploit for Improper Certificate Validation in Golang Go

POC for CVE-2021-34558 bash Run the malicious TLS server...

CVE-2021-20181 affecting package qemu-kvm 4.2.0-48

CVE-2021-20181 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-27661 affecting package qemu-kvm 4.2.0-48

CVE-2020-27661 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2021-22897 affecting package curl 7.76.0-9

CVE-2021-22897 affecting package curl 7.76.0-9. A patched version of the package is available...

CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-7

CVE-2020-17541 affecting package libjpeg-turbo 2.0.0-7. A patched version of the package is available...

CVE-2007-2768 affecting package openssh 8.9p1-3

CVE-2007-2768 affecting package openssh 8.9p1-3. A patched version of the package is available...

CVE-2021-33560 affecting package libgcrypt 1.8.7-3

CVE-2021-33560 affecting package libgcrypt 1.8.7-3. A patched version of the package is available...

PT-2021-16928 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.27 Description: An issue was discovered in the JForm API, where inadequate escaping in the rules field leads to a XSS vulnerability. Recommendations: For versions 3.0.0 through 3.9.27, update to a version th...

GHSA-M738-3RC4-5XV3 A user without PR can reset user authentication failures information

Impact The script service method used to reset the authentication failures record can be executed by any user with Script rights and does not require Programming rights as it should have. Note that being able to reset the authentication failure record mean that an attacker with script right might...

CVE-2021-32730

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A cross-site request forgery vulnerability exists in versions prior to 12.10.5, and in versions 13.0 through 13.1. It's possible for forge an URL that, when accessed by an admin, will reset th...

Input validation

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes...

CVE-2021-32718

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...