The vulnerability of the FortiSIEM security management portal, related to improper input neutralization, allows attackers to perform cross-site scripting attacks.

The vulnerability of the FortiSIEM security management portal is related to improper handling of input values in the parameters describing the device’s service schedule. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2021-14570 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior Description: The issue allows a remote user with admin privileges to potentially view arbitrary files on the target system by sending a specially crafted URL request. This c...

EPrints 安全漏洞

EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. EPrints 3.4.2 suffers from a command injection vulnerability. A remote attacker can exploit this vulnerability by entering specially crafted data into cgi/cal?year= URI to...

MGASA-2021-0091 Updated subversion packages fix security dos vulnerability

Subversion has been updated to fix a remote unauthenticated denial-of-service in Subversion modauthzsvn...

CVE-2021-26682

A remote reflected cross-site scripting XSS vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...

Wave Inspur ClusterEngine Parameter Injection Vulnerability

Wave Inspur ClusterEngine is an application software from China's Wave Corporation. It provides management of jobs submitted by hardware and software in a cluster system. A security vulnerability exists in Inspur ClusterEngine V4.0, which can be exploited by remote attackers to send malicious log...

The vulnerability of the ForeignKeyRawIdWidget implementation in the Django library allows attackers to perform cross-site scripting attacks.

The vulnerability of the ForeignKeyRawIdWidget implementation in the Django library is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks remotely...

[SECURITY] [DSA 4851-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4851-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 13, 2021 https://www.debian.org/security/faq -...

'/.jsp/WEB-INF/' Information Disclosure Vulnerability (HTTP)

Various application or web servers / products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HPESBNW04083 rev.2 - HPE and Aruba L2/L3 Switches, Remote Memory Corruption

Potential Security Impact: Remote: memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 5400R zl2 Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 3810M Switch Series - Prior to KB.16.10.0012, KB.16.09.0015, KB.16.08.0019 Aruba 2930M...

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over that information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

Geeni GNC-CW013 Access Control Error Vulnerability

The Geeni GNC-CW013 is a webcam from Geeni USA. A security vulnerability exists in the Geeni GNC-CW013 doorbell 1.8.1 devices that allows a remote attacker to take full control of the device with a highly privileged account...

Vulnerabilities fixed in OpenShift Container Platform

Red Hat has fixed multiple vulnerabilities in OpenShift Container Platform. A remote malicious party can exploit the exploit the vulnerabilities to gain access to sensitive information. Red Hat has released updates to fix the vulnerabilities in OpenShift Container Platform 3.11.374. For more...

IBM Security Guardium Insights Information Disclosure Vulnerability (CNVD-2021-03529)

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. An information disclosure vulnerability exists in IBM Security Guardium Insights 2.0.2. A remote attacker could exploit this...

PT-2021-1640 · Cisco · Cisco Unified Cvp +2

Name of the Vulnerable Software and Affected Versions: Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP affected versions not specified Description: A vulnerability in the web management interface of the affected software could allow an unauthenticated, remote attacker to...

CVE-2021-0312

CVE-2021-0312 involves WAVSource::read in WAVExtractor.cpp. Root cause: integer overflow causing an out-of-bounds write. Impact: remote information disclosure without extra execution privileges; requires user interaction to exploit. Affected Android versions: 8.0–11 (Android 8.0, 8.1, 9, 10, 11)....

Freyrscada IEC-60879-5-104 Server Simulator Security Vulnerability

Freyrscada IEC-60879-5-104 Server Simulator is a software from Freyrscada India for simulating communication between IEDs and RTUs over TCP. The software is written in C for all POSIX compliant operating systems and supports single server simulation of multiple workstation functionality. A securi...

HPE Integrated Lights-Out and Integrated Lights-Out 5 Information Disclosure Vulnerabilities

HPE Integrated Lights-Out and HPE Integrated Lights-Out 5 iLO 5 are both products of Hewlett Packard Enterprise hpe, U.S.A. HPE Integrated Lights-Out is a remote control solution. HPE Integrated Lights-Out 5 is a remote control solution that enables remote monitoring and operation and maintenance...

Savsoft Quiz Cross-Site Scripting Vulnerability

Savsoft Quiz is a Php-based administration platform for creating online exams and tests by Savsoft Individual Developers. A cross-site scripting vulnerability exists in Savsoft Quiz v5.0, which can be exploited by remote attackers to inject arbitrary web script or HTML via the Skype ID field...

Huawei CloudEngine 1800V 安全漏洞

Huawei CloudEngine 1800V is an 1800V series data center switch from Huawei of China. Huawei CloudEngine 1800V denial of service vulnerability can be exploited by remote attackers to submit special requests that can prevent messages received by the system from being forwarded properly for denial o...