Google Chrome Security Updates (stable-channel-update-for-desktop_19-2021-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Vulnerabilities fixed in openSUSE kernel

Vulnerabilities have been fixed in openSUSE. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User Rights Access to sensitive data Increased user rights -= openSUSE =- T...

Vulnerabilities fixed in Jenkins

Vulnerabilities have been fixed in Jenkins. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure Accessing sensitive data Jenkins has released updates to...

CVE-2021-1155

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

SQL injection vulnerability in miku cms backend cm***_bo***_ed***.php file

Miku cms is a movie and TV management system designed for webmasters with different needs. A SQL injection vulnerability exists in the cmboed.php file in the backend of Miku cms. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in yycms Movie & TV System V2.3 Admin Catalog yy***_km***.php

yycms is a movie and television system. yycms film and television system V2.3 version admin directory yykm.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in YouYi cms yy***_us***_ed***.php File

Youyi cms is a movie and TV station building system. A SQL injection vulnerability exists in the YouYi cms yyused.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in Douxin Us***.cl***.php file (CNVD-2021-03469)

Douxin is an open source framework focused on the development of WeChat. A SQL injection vulnerability exists in the Douxin Us.cl.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Incu Open Source Online School System

Incu open source online school system is by the Beijing Incu Times Technology Co., Ltd. hereinafter referred to as Incu Education Software developed and launched the Java version of the open source online school source code to build the system. Incu open source online school system has a SQL...

Vulnerabilities fixed in Android

Vulnerabilities have been fixed in Android. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges As usual,...

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

HcCMS suffers from SQL injection vulnerability

HcCms is a free website building system developed in php language. HcCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ShopsN open source mall system v3.0.6 de**** module SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. is a full-featured in line with enterprise-class commercial standards really allow free commercial use of the open source online store full network system . ShopsN open source mall system v3.0.6 de module SQ...

SQL Injection Vulnerability in Panmicro Collaboration Office System (CNVD-2021-01375)

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. A SQL injection vulnerability exists in Panmicro's collaborative office...

Acronis: HTTP Request Smuggling on https://promosandbox.acronis.com

Summary The website https://promosandbox.acronis.com is vulnerable to HTTP Request Smuggling which can be abused by an attacker to redirect all the users to a malicious website. A redirect can be forced by changing the Host request header using the path /sf but the website will redirect you to...

PT-2020-16642

Name of the Vulnerable Software and Affected Versions Mitel BusinessCTI Enterprise MBC-E Client for Windows versions prior to 6.4.11 Mitel BusinessCTI Enterprise MBC-E Client for Windows versions 7.x prior to 7.0.3 Description The issue is related to improper input validation in the chat window,...

Vulnerabilities fixed in XStream

Vulnerabilities have been fixed in XStream. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Manipulation of data Access to sensitive data The vulnerabilities are exploitable only when using the defau...

Vulnerabilities fixed in F5 BIG-IP

Vulnerabilities have been fixed in F5 BIG-IP. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Circumvention of security measure Spoofing Accessing sensitive data F5 has released updates...

Google Android Information Disclosure Vulnerability (CNVD-2020-73454)

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Vulnerabilities fixed in Red Hat OpenShift Container Platform

Vulnerabilities have been fixed in Red Hat Openshift Container Platform. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service Manipulation of data Access to sensitive data Red Hat has released updates to address the...