4742 matches found
CVE-2021-30146
CVE-2021-30146 affects Seafile Server 7.0.5 (2019). The vulnerability is a Persistent XSS in the"share of library" feature, enabling malicious JavaScript execution. The attack path described in sources indicates an attacker with a local account can create a shared library containing injected scri...
Exploit for Cross-site Scripting in Seafile
CVE-2021-30146 Seafile 7.0.5 Persistent XSS Suggested descri...
CVE-2021-1751
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...
CVE-2021-1751
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...
Code injection
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...
CVE-2021-1751
CVE-2021-1751 is a macOS vulnerability described as a logic issue in state management that can be triggered by mounting a malicious Samba network share, potentially leading to arbitrary code execution. The entry indicates the issue is fixed in macOS Big Sur 11.2 and Security Update 2021-001 Catal...
CVE-2021-1751
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
...
CVE-2021-24137
Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands...
Sql injection
Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands...
CVE-2021-24137
Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands...
CVE-2021-24137
CVE-2021-24137 affects the WordPress Blog2Social plugin prior to 6.3.1. Unvalidated input in the Re-Share Posts feature allows authenticated users to perform SQL injection, enabling arbitrary SQL execution against the database. The vulnerability is exploitable via the plugin’s Re-Share Posts flow...
Wordpress Blog2Social SQL注入漏洞
Wordpress Blog2Social is an application plugin for Wordpress. Provides an automatic posting and updating feature. A SQL injection vulnerability exists in WordPress Blog2Social plugin versions prior to 6.3.1, which stems from the fact that unauthenticated input can lead to SQL injection in the...
ALPINE-CVE-2021-20231
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
AZL-6446 CVE-2021-20231 affecting package gnutls for versions less than 3.6.14-5
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
CVE-2021-20231
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
Memory corruption
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
UBUNTU-CVE-2021-20231
A flaw was found in gnutls. A use after free issue in client sending keyshare extension may lead to memory corruption and other consequences...
Authorization Bypass
github.com/minio/minio is vulnerable to authorization bypass. PostPolicyHandler did not verify user policies and allows an attacker to bypass the readOnly policy by creating a temporary mc share upload URL...
Apache Oozie 竞争条件问题漏洞
Apache Oozie is an Apache Apache open source application. Provides a workflow scheduler system for managing Apache Hadoop job functions. Apache Oozie in version 5.2.1 before the existence of a security vulnerability , the vulnerability stems from the network system or product in the operation of...