PT-2021-3775

Name of the Vulnerable Software and Affected Versions Rancher versions prior to 2.5.9 Rancher versions prior to 2.4.16 Description A vulnerability in Rancher allows users in the cluster to modify resources they should not have access to due to incorrect permission assignment. This issue can be...

Etherpad 1.8.13 - Code Execution Vulnerabilities

Etherpad is one of the most popular online text editors that allows collaborating on documents in real-time. It is customizable with more than 250 plugins available and features a version history as well as a chat functionality. There are thousands of instances deployed worldwide with millions of...

Critical CISO Initiatives for the Second Half of 2021

As we all know, the coronavirus pandemic has affected CISOs and other security and risk-management leaders worldwide. Some of these leaders are developing and implementing security projects which are designed to simultaneously minimize the risk as well as support remote workers. In talking with o...

Weblate: No rate Limit on Add new Translation Project

Attacker able to create unlimited Translation projects which lead to no more project name for the users who wanted to create new project on hosted.weblate.org Below is the POC video which ,you can go through Impact Other users cant use the project names there wanted and attacker can occupy space...

GitLab EE 安全漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug list, and more. A security vulnerability exists in GitLab EE version 13.11...

PT-2021-13880 · Jbpm · Jbpm

Name of the Vulnerable Software and Affected Versions: jBPM version 7.51.0.Final Description: A flaw in the BPMN editor allows any authenticated user to see the names of Ruleflow Groups from other projects, despite not having access to those projects. This poses a threat to confidentiality...

The vulnerability of the User Interface sub-component of the Oracle Projects component in the Oracle E-Business Suite, which allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the User Interface component of the Oracle Projects component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

Information Disclosure

Redmine is vulnerable to information disclosure. An attacker is able to discover the names of private projects if issue-journal details exist that have changes to projectid values...

CVE-2021-31897

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

CVE-2021-31897

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

Code injection

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

CVE-2021-31897

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

CVE-2021-31897

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

CVE-2021-31897

CVE-2021-31897 affects JetBrains WebStorm prior to 2021.1, where code execution without user confirmation was possible for untrusted projects. The vulnerability is documented across multiple sources (NVD entry and Red Hat advisory) and is addressed in WebStorm 2021.1 per JetBrains’ Q1 2021 Securi...

PT-2021-19571

Name of the Vulnerable Software and Affected Versions: JetBrains WebStorm versions prior to 2021.1 Description: The issue allows for code execution without user confirmation in untrusted projects. Recommendations: For versions prior to 2021.1, update to version 2021.1 or later to resolve the issu...

CVE-2021-31897: Undefined Security Weakness

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects...

Unauthorized access vulnerability in the website building system of Jiangsu Wolye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, high-speed rail, safety supervision, water conservancy, farmland renovation, river lake long system, major projects, investment promotion, big visit, archives, Zanxue.com, the seven-color sheep...

CVE-2021-2258

Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...

CVE-2021-2258

Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...

Design/Logic Flaw

Vulnerability in the Oracle Projects product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects...