Unspecified vulnerability in vscode-shellcheck

vscode-shellcheck is open source an unofficial VS Code extension . A security vulnerability exists in versions of vscode-shellcheck prior to 0.13.4, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2021-15237 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.0.3 GitHub Enterprise Server version 2.22.9 GitHub Enterprise Server version 2.21.17 Description: A remote code execution issue was identified in GitHub Enterprise Server that could be exploited wh...

Grid Solutions GE Reason DR60 安全漏洞

The Reason DR60 is a centralized, all-in-one multi-function digital fault recorder DFR from GE. A privilege impropriety vulnerability exists in GE Reason DR60 firmware prior to version 02A04.1. The vulnerability stems from the software performing operations with a privilege level higher than the...

HPESBGN04109 rev.1 - HPE iLO Amplifier Pack, Multiple Remote Cross-Site Scripting (XSS) Vulnerabilities

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. iLO Amplifier Pack - Prior to version 1.80 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-11022 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

Sophos Sophos Connect clien 安全漏洞

Sophos Sophos Connect client is an IPsec remote access VPN application from Sophos UK. A security vulnerability exists in Sophos Connect Client versions prior to 2.1, which can be exploited by malicious websites to remotely execute code in Sophos Connect Client. The vulnerability can be exploited...

CVE-2021-26992

Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service DoS...

CVE-2021-26991

Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing CORS policy which could allow a remote attacker to interact with Cloud Manager...

CVE-2021-28089

Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001...

CVE-2021-24136

Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead to multiple Cross-Site Scripting vulnerabilities, allowing remote attackers to inject arbitrary JavaScript code or HTML via the below parameters: - Author - Job Title - Location ...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

CVE-2021-20675

M-System DL8 series type A DL8-A versions prior to Ver3.0, type B DL8-B versions prior to Ver3.0, type C DL8-C versions prior to Ver3.0, type D DL8-D versions prior to Ver3.0, and type E DL8-E versions prior to Ver3.0 allows remote authenticated attackers to cause a denial of service DoS conditio...

PT-2021-4624 · Pillow +9 · Pillow +9

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.2.0 Description: The issue is related to the readline implementation in the EPSImageFile component of the Pillow library. It uses a quadratic method to accumulate lines while searching for a line ending, which can b...

Apache Hive Information Disclosure Vulnerability (CNVD-2021-29476)

Apache Hive is a suite of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. An...

UBUNTU-CVE-2021-21193

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

HPESBGN04097 rev.1 - Hewlett Packard Enterprise Network Orchestrator (NetO), Remote SQL Injection Vulnerability

Potential Security Impact: Remote: SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Network Orchestrator -Prior to Version 2.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26578 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 7.5...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system written in PHP under the GNU General Public License. A cross-site scripting vulnerability exists in the database field used as descriptionColumn in TYPO3 versions prior to 10.4.14, 11.1.1. No detailed vulnerability details are available at...

PT-2021-4276 · Libdnf +6 · Libdnf +6

Name of the Vulnerable Software and Affected Versions: libdnf versions prior to 0.60.1 Description: The issue is related to an error in the signature verification function of the libdnf library, which manages packages. This could allow a remote attacker to access confidential data, compromise its...

CVE-2021-20282

When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17...

PACKET TIDE ExpressionEngine 代码注入漏洞

Packet Tide ExpressionEngine is an open source content management system CMS from Packet Tide, Inc. A code injection vulnerability exists in ExpressionEngine versions prior to 5.4.2 and 6.0.3, which allows certain authenticated users to inject PHP code...

Google Chrome post-release reuse vulnerability (CNVD-2021-22154)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 89.0.4389.90. No detailed vulnerability details are provided at this time...