11002 matches found
ADSelfService Plus 代码问题漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A server-side request forgery vulnerability exists in Zoho ManageEngin...
ZOHO ManageEngine ADSelfService Plus安全漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A domain user account takeover vulnerability exists in Zoho ManageEngi...
Dada Mail跨站请求伪造漏洞
Dada Mail is a web-based email list management system. A cross-site request forgery vulnerability exists in Dada Mail versions prior to 11.16.0. An attacker could send a crafted web page to obtain information about a user's account...
OpenSIS Community Edition Local File Inclusion Vulnerability
OpenSIS is the community edition of an open source enterprise content management system from Alfresco Software, Inc. The system includes document management, office collaboration and other features. openSIS Community Edition in versions prior to 7.6 there is a local file inclusion vulnerability,...
CVE-2021-40825
nLight ECLYPSE nECY system Controllers running software prior to 1.17.21245.754 contain a default key vulnerability. The nECY does not force a change to the key upon the initial configuration of an affected device. nECY system controllers utilize an encrypted channel to secure SensorViewTM...
PT-2021-19545 · Mcafee · Mcafee Endpoint Security
Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS Windows versions prior to 10.7.0 September 2021 Update Description: The issue allows local users to access files they would otherwise not have access to by manipulating junction links to redirect McAfee folder...
Amazon Linux 2 : ntp (ALAS-2021-1706)
The version of ntp installed on the remote host is prior to 4.2.8p15-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1706 advisory. The monlist feature in ntprequest.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service traffic...
Pimcore username enumeration vulnerability
Pimcore is a comprehensive open source enterprise platform for master data management PIM/MDM, user experience management CMS/UX, digital asset management DAM, and e-commerce.A username enumeration vulnerability exists in versions of Pimcore prior to 10.1.3. An attacker could exploit this...
CVE-2021-39205
Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being exploited in the...
CVE-2021-40157
A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system...
SITA Software Azur CMS 跨站脚本漏洞
SITA Software Azur CMS is a web CMS. A cross-site scripting vulnerability exists in SITA Software Azur CMS 1.2.3.1 and prior versions, which stems from the software's lack of effective validation and filtering of parameters. This allows a remote attacker to pass 1 NOMCLI, 2 ADRESSE, 3 ADRESSE2, 4...
Pimcore 信息泄露漏洞
Pimcore is a comprehensive open source enterprise platform for master data management PIM/MDM, user experience management CMS/UX, digital asset management DAM, and e-commerce.A username enumeration vulnerability exists in versions of Pimcore prior to 10.1.3. An attacker could exploit this...
CVE-2021-39123
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0...
Siemens SINEC NMS 路径遍历漏洞
Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A path traversal vulnerability exists in Siemens SINEC NMS versions...
Micro Focus NetIQ Access Manager 信息泄露漏洞
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are accessing on-premise or cloud-based services using a cell phone or laptop, Access Manager is secure and provides a single sign-on experience. Information disclosure...
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...
Design/Logic Flaw
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...