webTareas SQL注入漏洞

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A SQL injection vulnerability exists in webTareas version 2.4p3 and earlier versions, which stems from the $uq parameter of...

CVE-2021-43741

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...

Appneta Tcpreplay 资源管理错误漏洞

Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Tcpreplay v4.4.1, no information about the vulnerability is available at this time, please keep an eye on...

PT-2022-18708 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a heap-based buffer over-read in the get ipv6 next function located in common/get.c. This problem can potentially lead to information disclosure or other security issues...

CVE-2021-40766

Adobe Character Animator version 4.4 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

Tiny File Manager路径遍历漏洞

Tiny File Manager is a web-based open source file manager. A path traversal vulnerability in the tinyfilemanager.php file upload function in Tiny File Manager 2.4.1 allows remote attackers to upload malicious PHP files to the webroot using a valid user account and achieve code execution on the...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...

PT-2022-1766

Name of the Vulnerable Software and Affected Versions Expat aka libexpat versions prior to 2.4.5 Description The issue is related to insufficient input validation in the xmlparse.c component of the Expat library, allowing attackers to insert namespace-separator characters into namespace URIs. Thi...

Zabbix Sia Zabbix 安全漏洞

Zabbix Sia Zabbix is an open source monitoring system from the Latvian company Zabbix SIA Zabbix Sia. Zabbix 4.0 LTS, 4.2, 4.4 and 5.0 LTS versions are vulnerable due to a lack of filtering and escaping of user submitted command parameters. Any user with the "Zabbix Administrator" role can run a...

UBUNTU-CVE-2022-23990

Expat aka libexpat before 2.4.4 has an integer overflow in the doProlog function...

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).

...

OPENSUSE-SU-2022:0091-1 Security update for apache2

This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 jscSLE-22733 jscSLE-22849 It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES2.4 for a complete chang...

CVE-2021-45521

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...

CVE-2021-44207

Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...

CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

DEBIAN-CVE-2021-45088

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...

CVE-2021-44429

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

CVE-2021-42731

Adobe InDesign versions 16.4 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2021-21721 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.3.0 through 2.4.0 Description: A flaw was found in Apache ShenYu Admin, where the incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. Recommendations: For versions 2.3.0 and 2.4.0...