8741 matches found
CVE-2021-3339
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...
PT-2021-20130
Name of the Vulnerable Software and Affected Versions ModernFlow versions prior to 1.3.00.208 Description The issue is related to inadequate access control, where web-page access is not properly constrained to members of a security group. This is demonstrated by the lack of access control on the...
CVE-2021-3339: Improper Authentication
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...
OPENSUSE-SU-2021:0304-1 Security update for screen
This update for screen fixes the following issues: - CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092. This update was imported from the SUSE:SLE-15:Update update project...
Security update for screen (important)
openSUSE Security Update: Security update for screen Announcement ID: openSUSE-SU-2021:0304-1 Rating: important References: 1182092 Cross-References: CVE-2021-26937 CVSS scores: CVE-2021-26937 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...
SUSE SLED15 / SLES15 Security Update : screen (SUSE-SU-2021:0492-1)
This update for screen fixes the following issues : CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE SLES12 Security Update : screen (SUSE-SU-2021:0491-1)
This update for screen fixes the following issues : CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE-SU-2021:0492-1 Security update for screen
This update for screen fixes the following issues: - CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092...
SUSE-SU-2021:0491-1 Security update for screen
This update for screen fixes the following issues: - CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution bsc1182092...
Debian DLA-2557-1 : linux-4.19 security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2020-27815 A flaw was reported in the JFS filesystem code allowing a local attacker with the ability to set extended attributes to cause a denial o...
February 16, 2021âKB4601380 (OS Build 18363.1411) Preview
None None...
CVE-2020-36234
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14...
Project iKy v2.7.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface
Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...
Microsoft Windows TCP/IP Denial of Service Vulnerability
The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A denial of service vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by an attacker by sending multiple crafted IPv6 packets multiple IP packet...
CVE-2021-26937
A flaw was found in screen. A specially crafted sequence of combining characters could cause an out of bounds write leading to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation This flaw is in...
GNU Screen Denial of Service Vulnerability (CNVD-2021-13240)
GNU Screen is a freeware program developed by the GNU Project for switching between command-line terminals. It allows users to connect to multiple local or remote command line sessions at the same time and switch between them freely. A denial of service vulnerability exists in encoding.c in GNU...
CVE-2021-26937
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...
DEBIAN-CVE-2021-26937
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...
ALPINE-CVE-2021-26937
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...
AZL-7356 CVE-2021-26937 affecting package screen for versions less than 4.9.1-1
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service invalid write access and application crash or possibly have unspecified other impact via a crafted UTF-8 character sequence...