8298 matches found
旭聊科技 Sunnet eHRD 代码问题漏洞
Sunnet eHRD is a talent management system from Sun Chat Technology, Taiwan, China. The system supports talent management and performance management, etc. An insecure deserialization vulnerability exists in Sunnet eHRD, which stems from the inadequate input object validation and restriction of the...
CVE-2021-43360: Deserialization of Untrusted Data
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
CVE-2021-43360
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
UVI-2021-1002329 sched/fair: Prevent dead task groups from regaining cfs_rq's
sched/fair: Prevent dead task groups from regaining cfsrq's This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
PT-2021-26799
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: The issue prevents dead task groups from regaining cfs rq's. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.5,...
Nomad QEMU Task Driver Allowed Paths Bypass with Job Args
Summary Nomad and Nomad Enterprise “Nomad”, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed paths for images. This vulnerability, CVE-2021-43415, was fixed in Nomad 1.0.14, 1.1.8, and 1.2.1. Background Nomad provides...
Hashicorp Nomad 安全漏洞
Hashicorp Nomad is a distributed, data center-aware cluster and application scheduler from Hashicorp, USA. The program supports the deployment of microservices, batch, containerized and non-containerized applications. Hashicorp Nomad suffers from a security vulnerability that stems from an error...
Microsoft Windows Diagnostic Hub Elevation of Privilege Vulnerability
Microsoft Windows Diagnostic Hub is an application from Microsoft Corporation USA. It is not only a task manager, but also a device diagnostic center. This application combines Windows developer tools with UWP functionality to access new information and features.Microsoft Windows Diagnostic Hub i...
JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91665)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...
Employee Daily Task Management System 1.0 - (Name) Stored Cross-Site Scripting Vulnerability
Exploit Title: Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting XSS Exploit Author: Ragavender A G Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/edtms.zip Version: v1.0 Tested on:...
Employee Daily Task Management System 1.0 Cross Site Scripting
Exploit Title: Employee Daily Task Management System 1.0 - 'Name' Stored Cross-Site Scripting XSS Date: 09/11/2021 Exploit Author: Ragavender A G Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/edtms.zip Version...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
Code injection
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43190
In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible...
CVE-2021-43190
JetBrains YouTrack Mobile before 2021.2 is affected by a task hijacking vulnerability on Android. The CVE-2021-43190 issue impacts integrity (I:L) with no confidentiality/availability impact, CVSS 3.1 base 5.3. Exploitation appears possible over network with no user interaction. The JetBrains Q3 ...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that could ...
PT-2021-23772
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack Mobile versions prior to 2021.2 Description The issue allows for task hijacking on Android. Recommendations For versions prior to 2021.2, update to version 2021.2 or later to resolve the issue...