PT-2021-21175

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue allows an unauthorized user to access sensitive data upon successful exploitation. No information is provided about the estimated number of...

CVE-2021-44050

CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...

CVE-2021-44050: Improper Neutralization of Special Elements used in an SQL Command

CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...

Vulnerabilities fixed in IBM QRadar

IBM has fixed vulnerabilities in QRadar. The vulnerabilities potentially enable a malicious person to conduct attacks leading to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Access to sensitive data Increased user privileges IBM has made updates available to...

CVE-2021-43409 WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting

The “WPO365 | LOGIN” WordPress plugin up to and including version 15.3 by wpo365.com is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data...

Vulnerabilities fixed in IBM MQ

IBM has fixed vulnerabilities in MQ. The vulnerabilities allow a malicious person potentially able to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data The vulnerability with attribute CVE-2021-28165 ha...

CVE-2020-12488

The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission...

Vulnerabilities fixed in Microsoft Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities allow a malicious party to gain elevated permissions and to obtain sensitive data. Azure RTOS: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in the following products: SAP ABAP Platform Kernel SAP Commerce SAP ERP Financial Accounting SAP ERP HCM Portugal SAP Focused SAP GUI for Windows SAP NetWeaver Application Server for ABAP and ABAP Platform. SAP Solution Manager The vulnerabilities potentially enable...

CVE-2021-34701

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could...

Google Chrome Security Update (stable-channel-update-for-desktop_28-2021-10) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2021-5008

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager Session Management Edition versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service...

Vulnerabilities fixed in Wind River Linux

Vulnerabilities have been fixed in Wind River Linux. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote...

XML External Entity (XXE) Injection

easy-xml is vulnerable to XML external entity injection. When processing XML data, the parseXML function in init .py allows an attacker to access sensitive data or crash the application...

PybbsCms SQL注入漏洞

PybbsCms is a more practical community forum for Java development. A SQL injection vulnerability exists in TopicMapper.xml in PybbsCMS v5.2.1, which can be exploited by attackers to access sensitive database information...

Multiple vulnerabilities fixed in McAfee ePolicy Orchestrator

McAfee has fixed multiple vulnerabilities in McAfee ePolicy Orchestrator. The vulnerabilities allow a malicious party whether or not unauthenticated malicious person may be able to launch attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS...

Authentication flaw

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

PT-2021-10817

Name of the Vulnerable Software and Affected Versions Sky File version 2.1.0 Description The issue allows attackers to access sensitive data and files via 'null' path commands due to a directory traversal vulnerability in the FTP server. Recommendations For Sky File version 2.1.0, consider...

PT-2021-10831 · Unknown · Nong Ge File Explorer

Name of the Vulnerable Software and Affected Versions: Nong Ge File Explorer version 1.4 Description: The issue is related to the authentication mechanism, allowing unauthenticated access to sensitive data. Recommendations: For Nong Ge File Explorer version 1.4, update to a newer version that...

CVE-2020-23040: Improper Limitation of a Pathname to a Restricted Directory

Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands...