Medium: libX11

Issue Overview: A flaw was found in libX11. An integer overflow leading to a heap-buffer overflow occurs when setuid programs call XIM client functions while running with elevated privileges. The highest threat from this vulnerability are to data confidentiality and integrity as well as system...

07FLY-CRM Customer Management System v1.2 suffers from SQL injection vulnerability (CNVD-2021-46819)

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM customer management system v1.2 SQL injection vulnerability , attackers can exploit the vulnerability to obtain...

Weak Password Vulnerability in Hysine Webtalk System

Hysine is the world's leading manufacturer of BACnet control systems. A weak password vulnerability exists in the Hysine Webtalk system, which can be exploited by attackers to obtain sensitive information...

GSD-2021-1000624 btrfs: return whole extents in fiemap

btrfs: return whole extents in fiemap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit 55575c08502f291cdeff09428189b84084ffa91...

CVE-2021-32540

Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack...

Cisco DNA Spaces Operating System Command Injection Vulnerability

Cisco DNA Spaces is a set of indoor location services platform of the United States Cisco Cisco. An operating system command injection vulnerability exists in Cisco DNA Spaces Connector versions prior to 2.0.519, which stems from improper input validation. An attacker could exploit this...

Cisco DNA Spaces OS Command Injection Vulnerability (CNVD-2021-37122)

Cisco DNA Spaces is a set of indoor location services platform of the United States Cisco Cisco. An operating system command injection vulnerability exists in Cisco DNA Spaces Connector versions prior to 2.3.1, which can be exploited by an attacker to execute arbitrary operating system commands o...

CVE-2017-17674

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerable to attacks such as system fingerprinting, internal port scanning, Server Side Request Forgery SSRF, or remote code execution RCE...

NetBSD Input Validation Error Vulnerability

NetBSD is an open source Unix-like operating system from the NetBSD Netbsd Foundation. A security vulnerability exists in NetBSD version 7.1. An attacker could exploit this vulnerability to cause a denial of service to a program...

OpenClinic GA SQL Injection Vulnerability (CNVD-2021-34998)

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An SQL injection vulnerability exists in the immoService parameter in listImmoLabels.jsp in OpenClinic GA version...

Unauthorized Access Vulnerability in Teach's WEB Exam System

After 13 years of accumulation and precipitation of education technology, Fuxin Teach's Beginning Technology Development Co., Ltd. focuses on the development of examination system software, and is one of the few professional examination system developers in China. There is an unauthorized access...

Google Android System elevation of privilege vulnerability (CNVD-2021-43413)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to cause...

Weak password vulnerability in Belkin's WRT1900ACS

The WRT1900ACS is a Belkin router product. A weak password vulnerability exists in the Belkin WRT1900ACS, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Unix UOS Desktop Pro x86_64 suffers from a denial of service vulnerability (CNVD-2021-34252)

Unisys UOS Professional Edition is a computer operating system based on the domestic depth system deepin modification. A denial of service vulnerability exists in Unisys UOS Desktop Professional x8664. An attacker can exploit this vulnerability to cause the program to crash...

PT-2021-2858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. It is caused by insufficient file scope limiting,...

GHSA-3C67-GC48-983W Path Traversal in Ansible

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file with...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to execute arbitrary commands on the underlying Linux operating system.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to the implementation or modification of arguments. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the Linux kernel with root privileges...