CVE-2021-37112

CVE-2021-37112 concerns the Huawei HarmonyOS Hisuite module, described as an External Control of System or Configuration Setting vulnerability. Exploitation could lead to a firmware leak. Public data across connected sources confirms impact is targeted at the Hisuite component within HarmonyOS wi...

PT-2022-11098 · Unknown · Password Vault

Name of the Vulnerable Software and Affected Versions: Password vault affected versions not specified Description: The password vault has an External Control of System or Configuration Setting issue. Successful exploitation could compromise confidentiality. Recommendations: At the moment, there i...

PT-2022-10619 · Huawei · Hisuite

Name of the Vulnerable Software and Affected Versions: Hisuite module affected versions not specified Description: The issue is related to an External Control of System or Configuration Setting vulnerability. Successful exploitation of this vulnerability may lead to a Firmware leak...

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

CVE-2021-44877

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

Improper access control

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Description I found one more CSRF at Clean cache in the System tab of System configuration via GET request. Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking admin to clear the cache of the system, that can potential lead to a DoS attack. Remediation Use POST request...

CVE-2021-41242

OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create directory structures and write files...

Crafter CMS File Overwrite Vulnerability

Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

Design/Logic Flaw

Authenticated administrators may override the system configuration file and cause a denial of service...

CVE-2021-23261 Overriding the system configuration file causes a denial of service

Authenticated administrators may override the system configuration file and cause a denial of service...

CVE-2021-23261

Crafter CMS is affected by a vulnerability where an authenticated administrator can override the system configuration file , enabling a denial of service . The description and related entries (CVE-2021-23261, Crafter CMS CNVD/CNNVD references) confirm the root cause as a file overwrite/authentica...

Crafter CMS 安全漏洞

Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...

CVE-2021-23261

Authenticated administrators may override the system configuration file and cause a denial of service...

The vulnerability of Mac OS operating systems, related to logical errors, allows attackers to circumvent security restrictions.

The vulnerability of Mac OS operating systems arises due to a logical error in the implementation of system configuration settings. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

scap-security-guide bug fix and enhancement update

The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol SCAP format and constitutes a catalog of practical hardening advice, linked to government...

NETGEAR 安全漏洞

NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR routers that could be exploited by a network neighbor attacker to disclose sensitive information about...

CVE-2021-42540

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...