CVE-2021-41242

OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create directory structures and write files...

Crafter CMS File Overwrite Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

Design/Logic Flaw

Authenticated administrators may override the system configuration file and cause a denial of service...

CVE-2021-23261

Crafter CMS is affected by a vulnerability where an authenticated administrator can override the system configuration file , enabling a denial of service . The description and related entries (CVE-2021-23261, Crafter CMS CNVD/CNNVD references) confirm the root cause as a file overwrite/authentica...

CVE-2021-23261 Overriding the system configuration file causes a denial of service

Authenticated administrators may override the system configuration file and cause a denial of service...

PT-2021-15421

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue allows authenticated administrators to override the system configuration file, which can cause a denial of service. Recommendations At the moment, there is no information about a...

Crafter CMS security vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

Mac OS Logical Error

The vulnerability of Mac OS operating systems arises due to a logical error in the implementation of system configuration settings. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

scap-security-guide bug fix and enhancement update

The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol SCAP format and constitutes a catalog of practical hardening advice, linked to government...

NETGEAR security vulnerabilities

NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR routers that could be exploited by a network neighbor attacker to disclose sensitive information about...

CVE-2021-42540

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

Code injection

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

CVE-2021-42540

The CVE-2021-42540 entry relates to Emerson WirelessHART Gateway and describes an unsanitized extract folder vulnerability in system configuration. The underlying issue allows a low-privileged user to overwrite settings and other key functionality due to missing input/permission validation during...

PT-2021-23618

Name of the Vulnerable Software and Affected Versions Affected product affected versions not specified Description The issue concerns an unsanitized extract folder for system configuration, which can be exploited by a low-privileged user to overwrite settings and other key functionality...

CVE-2021-41152

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...

CVE-2021-34702: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information. This vulnerability is due to improper enforcement of administrator privilege levels for low-value sensitive data. An attacker...

Cisco Identity Services Engine security vulnerabilities

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information about the network, users, and devices to formulate and enforce policies to regulate the network. A security vulnerability exists in the Cisco Identit...