CVE-2021-25341

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider...

PT-2021-14412 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.4 Description: The issue involves an XSS vulnerability in GLPI, a free asset and IT management software package, where a logged-in user is affected while updating a ticket. Recommendations: For versions prior to...

GLPI 跨站脚本漏洞

GLPI is an open source software for IT equipment management, developed using the PHP language. A cross-site scripting vulnerability exists in GLPI versions prior to 9.5.4 when a logged-in user is updating a work order, and no detailed vulnerability details are available at this time...

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

UltimateKode Neo Billing 跨站脚本漏洞

Envato Neo Billing is an Envato open source application. Provides a well-designed enterprise billing and accounting solution. UltimateKode Neo Billing before 3.5 suffers from a cross-site scripting XSS vulnerability that stems from the lack of proper validation of client-side data in the WEB...

Dell EMC OpenManage Server Administrator 路径遍历漏洞

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

Dell EMC OpenManage Server Administrator 授权问题漏洞

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

CVE-2020-24480

Out-of-bounds write in the IntelR XTU before version 6.5.3.25 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

Netapp Clustered Data ONTAP 安全漏洞

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20, 9.5P15. An attacker could exploit this vulnerability to discover other storage virtual machines SVM...

IBM MQ 代码问题漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. A remote code execution vulnerability exists in IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD, which is caused ...

CVE-2020-35844

FastStone Image Viewer 7.5 has an out-of-bounds write via a crafted image file at FSViewer.exe+0xbe9c4...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is a free image viewing, converting and editing tool. An out-of-bounds write vulnerability exists in FSViewer.exe+0xbe9c4 in FastStone Image Viewer 7.5. No details of the vulnerability are provided at this time...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is a free image viewing, converting and editing tool. An out-of-bounds write vulnerability exists in FSViewer.exe+0x956e in FastStone Image Viewer 7.5. No details of the vulnerability are provided at this time...

DEBIAN-CVE-2021-21238

PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping...

CVE-2020-20949

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube UM1924. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the...

IBM Workload Automation Information Disclosure Vulnerability (CNVD-2021-03565)

IBM Workload Automation is an American IBM software for batch and real-time workload management. An information disclosure vulnerability exists in IBM Workload Automation version 9.5 that originates from storing sensitive information in HTML comments, which can be exploited by an attacker to obta...

IBM Workload Automation Information Disclosure Vulnerability (CNVD-2021-03552)

IBM Workload Automation is an American IBM software for batch and real-time workload management. A security vulnerability exists in IBM Workload Automation 9.5, which can be exploited by attackers to obtain sensitive data...

IBM Workload Automation Information Disclosure Vulnerability (CNVD-2021-03568)

IBM Workload Automation boosts productivity and enhances management of enterprise business workloads through a blend of automation and application analytics. An information disclosure vulnerability exists in IBM Workload Automation 9.5. The vulnerability stems from the program storing sensitive...