CVE-2021-37466

In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= reflected...

CVE-2021-37464

In NCH Quorum v2.03 and earlier, XSS exists via Conference Description stored...

CVE-2021-31581

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

CVE-2021-35464

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

CVE-2021-28131

Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, therefore Impala users with access to the logs can use another authenticated user's sessions with specially constructed requests. This means the...

Nvidia vGPU Software 安全漏洞

Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security vulnerability...

Oracle PeopleSoft Products输入验证错误漏洞

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The products provide human capital management, financial management, supplier relationship management, and other functions. A security vulnerability exists in Oracle PeopleSoft versions 9.0 an...

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways.

...

Codoforum cross-site scripting vulnerability (CNVD-2021-50177)

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Pages" parameter...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer version 9.0 contai...

Codoforum cross-site scripting vulnerability (CNVD-2021-50179)

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Manage Users" parameter...

PT-2021-6698 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.0 and later Description: The issue is related to incorrect handling of the username variable, allowing a remote attacker to cause a denial of service. This can lead to the rejection of access to a user's profile page v...

GitLab 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE/EE, which...

Monstra CMS 跨站脚本漏洞

Monstra is a lightweight content management system CMS. A cross-site scripting vulnerability exists in Monstra version 3.0.4. The vulnerability can be exploited to conduct cross-site scripting attacks via the page function in admin/index.php...

Red Hat libvirt Denial of Service Vulnerability (CNVD-2021-46874)

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A denial of service vulnerability exists in the...

ImageMagick memory leak vulnerability (CNVD-2021-49050)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in AcquireSemaphoreMemory in semaphore.c and AcquireMagickMemory in memory.c in ImageMagick version 7.0.11-14. No details of the...

PT-2021-10733

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System in PHP version 4.0 Description The issue allows remote unauthenticated users to exploit a SQL injection vulnerability in the hmschange-emaild.php file to obtain sensitive database information...

OWASP ESAPI 安全漏洞

OWASP ESAPI is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. A security vulnerability exists in OWASP ESAPI version 2.0 RC2 and prior versions. The vulnerability stems from an oracle padding attack...

Micro Star Dragon Center 安全漏洞

Micro Star Dragon Center is an application for management control of MSI components, desktop systems and peripherals from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in MSI Dragon Center version 2.0.104.0, which stems from a program that allows...

ECShop SQL Injection Vulnerability (CNVD-2021-44949)

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 3.0. An attacker can exploit this vulnerability by using the aid parameter of admin/affiliateck.php to conduct SQL injection attacks...