Pluck 命令注入漏洞

Pluck is a content management system CMS developed using the PHP language. A security vulnerability exists in Pluck-4.7.10-dev2, which originates from the admin background, and a remote command execution vulnerability exists when uploading files...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004compressedsection ... /... /src/decode.c:2379 to cause a heap buffer overflow...

PT-2021-10678

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the read 2004 compressed section function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, consider applying a...

GNU LibreDWG 缓冲区错误漏洞

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the bitcalcCRC ... /... /src/bits.c:2213 to exploit the vulnerability and cause a heap buffer overflow...

PT-2021-10685

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit search sentinel function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider updating...

CVE-2021-22155

An Authentication Bypass vulnerability in the SAML Authentication component of BlackBerry Workspaces Server deployed with Appliance-X versions 10.1, 9.1 and earlier could allow an attacker to potentially gain access to the application in the context of the targeted user’s account...

CVE-2020-26143

An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration...

UBUNTU-CVE-2020-26140

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration...

CVE-2021-27614

SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the...

CVE-2021-27613

Under certain conditions, SAP Business One Chef cookbook, version - 9.2, 9.3, 10.0, used to install SAP Business One, allows an attacker to exploit an insecure temporary folder for incoming & outgoing payroll data and to access information which would otherwise be restricted, which could lead to...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. Microsoft Graphics Component is vulnerable to a resource management error. The following products and editions are affected: Windows 10 Version 20H2 for ARM64-based Systems, Windows Server version 20H2...

May 11, 2021-KB4601556 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 1909, and Windows Server, version 1909

None None...

May 11, 2021-KB5001841 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

Microsoft Windows Container Isolation FS Filter Driver 权限许可和访问控制问题漏洞

Microsoft Windows Container Isolation FS Filter Driver is an application from Microsoft Corporation USA. A container isolation driver. Windows Container Isolation FS Filter Driver is vulnerable to privilege permission and access control issues. The following products and editions are...

May 11, 2021-KB5001879 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Microsoft Windows Codecs 代码注入漏洞

Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A security vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected: Windows 10 Version 20H2 for ARM64-based Systems,Windows 1...

PT-2021-3111

Name of the Vulnerable Software and Affected Versions Moodle versions 3.10 to 3.10.3 Moodle versions 3.9 to 3.9.6 Moodle versions 3.8 to 3.8.8 Moodle versions prior to 3.8 Description The issue arises from insufficient sanitizing of user-provided data in the LTI authorization endpoint, leading to...

PT-2021-3113 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 to 3.5.17 Moodle versions 3.8 to 3.8.8 Moodle versions 3.9 to 3.9.6 Moodle versions 3.10 to 3.10.3 Description: The issue exists due to insufficient input validation in the virtual learning environment. This allows a remot...

GHSA-3C6G-PVG8-GQW2 trentm/json vulnerable to command injection

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function...

Jellyfin 代码问题漏洞

Jellyfin is a freeware media system. It allows you to control the management and streaming of media. It is an alternative to the proprietary Emby and Plex and can serve media from a dedicated server to end-user devices through multiple applications. A code issue vulnerability exists in versions o...