Lucene search
+L

3818 matches found

CNVD
CNVD
•added 2021/07/15 12:00 a.m.•84 views

Booking Core has an unspecified vulnerability

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core has a security vulnerability that stems from the subscription functionality in Ultimate Booking...

7.8CVSS1.3AI score0.00898EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/14 12:00 a.m.•20 views

Booking Core 安全漏洞

Booking Core is an application. A Laravel-based booking system designed for travel websites, malls, travel agents, tour operators, B&Bs, villa rentals, resort rentals, Make Travel websites.Booking Core has a security vulnerability that stems from the subscription functionality in Ultimate Booking...

7.8CVSS5.8AI score0.00898EPSS
SaveExploits0References1
Imperva Blog
Imperva Blog
•added 2021/07/04 6:45 a.m.•170 views

Compliance When Migrating to the Cloud: SQL Server Running on Azure vs. On- Premise

In the age of the data era, where data storage is increasing at an exponential rate and access to information is getting easier and faster, data security is a major concern. There are many cases where we can’t prevent people from accessing data, but we can track and investigate suspicious...

7.3AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2021/06/29 1:43 p.m.•17 views

subscription-manager bug fix and enhancement update

An update is available for subscription-manager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The subscription-manager packages provide programs and libraries...

1.2AI score
SaveExploits0
AlmaLinux
AlmaLinux
•added 2021/06/29 1:43 p.m.•22 views

subscription-manager bug fix and enhancement update

The subscription-manager packages provide programs and libraries to allow users to manage subscriptions and yum repositories from the AlmaLinux entitlement platform. Bug Fixes and Enhancements: dnf uploadprofile does not read variables set by files in /etc/yum/vars/ BZ1951053...

3.2AI score
SaveExploits0
Atlassian
Atlassian
•added 2021/06/22 10:58 a.m.•57 views

Plan managed by specs allows to modify artifact dependencies with UI

h3. Issue Summary RSS-managed plan should be in View mode for every tab and page. h3. Steps to Reproduce Create plan managed by RSS with artifact subscription settings Open Plan config page and visit artifacts tab of job Click Edit or Delete button of artifact subscription item h3. Expected Resul...

2AI score
SaveExploits0Affected Software1
Virtuozzo
Virtuozzo
•added 2021/06/11 12:00 a.m.•53 views

Virtuozzo Linux 8.4

The complete list of changes is available in RHEL 8.4 release notes at https://access.redhat.com/documentation/en-us/redhatenterpriselinux/8/html-single/8.4releasenotes/index. Vulnerability id: VZL-94 If subscription-manager was installed, any dnf command could produce warnings about the system n...

0.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2021/06/07 9:17 p.m.•65 views

CVE-2021-3585

A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager...

5.5CVSS1.6AI score0.00254EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/06/02 12:00 a.m.•28 views

Unspecified Vulnerability in ZeroMQ

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ server versions prior to 4.3.3, which stems from a vulnerability that allows a malicious client to cause a stack buffer overflow on the server by sending a carefully crafted topic...

9.8CVSS7AI score0.01844EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/01 2:15 p.m.•28 views

DEBIAN-CVE-2021-3515

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.createsubscription...

6.7CVSS6.7AI score0.0046EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/01 2:15 p.m.•18 views

UBUNTU-CVE-2021-3515

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.createsubscription...

6.7CVSS6.8AI score0.0046EPSS
SaveExploits0References4
OSV
OSV
•added 2021/05/28 11:15 a.m.•17 views

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.8CVSS9.3AI score
SaveExploits0References2
NVD
NVD
•added 2021/05/28 11:15 a.m.•35 views

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.8CVSS0.01844EPSS
SaveExploits0References2
Mend
Mend
•added 2021/05/28 10:42 a.m.•2 views

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.8CVSS0.01844EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/05/28 10:42 a.m.•69 views

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.6AI score0.01844EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/05/28 10:42 a.m.•98 views

CVE-2021-20236

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.8CVSS8.5AI score0.01844EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•17 views

ZeroMQ 缓冲区错误漏洞

ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ server versions prior to 4.3.3, which stems from a vulnerability that allows a malicious client to cause a stack buffer overflow on the server by sending a carefully crafted topic...

9.8CVSS8.6AI score0.01844EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/28 12:00 a.m.•9 views

PT-2021-8015

Name of the Vulnerable Software and Affected Versions ZeroMQ versions prior to 4.3.3 Description A flaw in the ZeroMQ server allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. This poses a threat to...

10CVSS9.5AI score0.01844EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/28 12:00 a.m.•5 views

CVE-2021-20236: Buffer Copy without Checking Size of Input

A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as...

9.8CVSS6.1AI score0.01844EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2021/05/26 12:00 a.m.•51 views

Oracle Linux 8 : gssdp / and / gupnp (ELSA-2021-1789)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1789 advisory. gssdp 1.0.5-1 + gssdp-1.0.5-1 - Update to 1.0.5 - Fix SUBSCRIBE misbehaviour - Resolves: 1861928 gupnp 1.0.6-1 + gupnp-1.0.6-1 - Update to 1.0.6 - Fix SUBSCRIBE...

7.8CVSS6.7AI score0.15193EPSS
SaveExploits4References2
Rows per page
Query Builder