VulnCheck KEV: CVE-2013-7389

Multiple cross-site scripting XSS vulnerabilities in D-Link DIR-645 Router Rev. A1 with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the 1 deviceid parameter to parentalcontrols/bind.php, 2 RESULT parameter to info.php, or 3 receiver...

PT-2024-11081 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc5 Description: The issue arises from the overlayfs not putting temporary dentry when there is a metacopy error, leading to dentry leaks when shutting down the related superblock. This results in busy...

PT-2022-2644 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.189 Description: The issue is related to an integer overflow in the io uring interface of the Linux Kernel, which can be exploited by a local attacker to cause memory corruption and escalate privileges to th...

CITSmart SQL Injection Vulnerability

CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...

GNOME file-roller 路径遍历漏洞

GNOME file-roller is a compressed file manager used in the GNOME desktop. A path traversal vulnerability exists in GNOME file-roller version 3.38.0 and prior versions, which stems from allowing directory traversal during extraction...

Linux kernel infinite loop vulnerability (CNVD-2021-29471)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A setmemoryregiontest infinite loop vulnerability exists in arch/x86/kvm/svm/svm.c in Linux kernel versions prior to...

CVE-2021-25692

Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3...

UBUNTU-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

DEBIAN-CVE-2021-30163

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to projectid values...

Pomerium Open Redirect Vulnerability (CNVD-2021-25956)

Pomerium is an identity agent that gives you secure access to internal applications. An open redirection vulnerability exists in versions of Pomerium prior to 0.13.4. No detailed vulnerability details are provided at this time...

OpenResty 安全漏洞

Openresty OpenResty is a web application server based on Nginx and Lua from China Ou Rui Software Development Openresty. A security vulnerability exists in OpenResty versions prior to 0.10.16 that allows the use of unsafe characters in parameters...

Proofpoint Insider Threat Management Server 代码问题漏洞

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. An XML external entity injection vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1. An attacker cou...

PT-2021-15710 · WordPress · Ninja Forms Contact Form

Name of the Vulnerable Software and Affected Versions: Ninja Forms Contact Form WordPress plugin versions prior to 3.4.34.1 Description: The issue allows low-level users, such as subscribers, to trigger the wp ajax nf oauth action and retrieve the connection URL needed to establish a connection...

PT-2021-14913 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to the fixed version Description: An issue has been discovered affecting all previous versions of GitLab CE/EE. It allows for a CSRF attack in System hooks through the API if the victim is an admin. Recommendations...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 14.0 and iPadOS prior to 14.0, which stems from the handling of maliciously...

PT-2021-18383 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions prior to 0.13.4 Description: The issue allows an outside attacker to get a signed login URL that, upon visiting it, will redirect a victim to the attacker’s site, creating an Open Redirect problem and potentially leading to...

F5 Networks BIG-IP : TMM vulnerability (K37451543)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.1 / 16.1.0 / Hotfix- BIGIP-14.1.4.0.120.11-ENG.iso / Hotfix-BIGIP-16.0.1.1.9.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K37451543 advisory. - On BIG-IP versions 14.1.4 and 16.0.1.1...

Linux kernel data size validation error vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A data size validation error vulnerability exists in tipcnlretrievekey in net/tipc/node.c in Linux kernel versions...

Linux kernel denial of service vulnerability (CNVD-2021-25962)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the netfilter subsystem in Linux kernel versions prior to 5.11.11. The...

PT-2021-17407 · Woocommerce · Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce Advanced Order Export versions prior to 3.1.8 Description: The issue allows for XSS. Recommendations: For versions prior to 3.1.8, update to version 3.1.8 or later to resolve the issue...