CVE-2022-31062

creationtimestamp| type| source ---|---|--- 2022-06-21 02:26:53+00:00| seen| https://t.me/cibsecurity/44848...

USN-5482-1 spip vulnerabilities

It was discovered that SPIP incorrectly validated inputs. An authenticated attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2020-28984 Charles Fol and Théo Gordyjan discovered that SPIP is vulnerable to Cross Site Scripting XSS. If a...

Growi vulnerable to weak password requirements

Overview GROWI provided by WESEEK, Inc. contains a weak password requirements vulnerability CWE-521, CVE-2022-1236. 418sec first reported this vulnerability to JPCERT/CC, then JPCERT/CC contacted WSEEK, Inc. as a coordinator. After the coordination between 418sec and WESEEK, Inc. was completed,...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Autopilot. The following products and editions are affected: Windows 10 Version 21H1 for x64-based Systems,Window...

CVE-2021-42890

creationtimestamp| type| source ---|---|--- 2022-06-03 18:26:38+00:00| seen| https://t.me/cibsecurity/43819...

CVE-2021-38221

creationtimestamp| type| source ---|---|--- 2022-06-02 22:25:55+00:00| seen| https://t.me/cibsecurity/43763...

CVE-2021-3597

creationtimestamp| type| source ---|---|--- 2022-05-24 22:37:07+00:00| seen| https://t.me/cibsecurity/43289 2024-01-28 06:43:46+00:00| seen| https://t.me/arpsyndicate/3237...

CVE-2021-42612

creationtimestamp| type| source ---|---|--- 2022-05-24 22:37:06+00:00| seen| https://t.me/cibsecurity/43288...

CVE-2021-30028

creationtimestamp| type| source ---|---|--- 2022-05-20 18:31:36+00:00| seen| https://t.me/cibsecurity/43064...

合勤科技 USG FLEX 操作系统命令注入漏洞

Zyxel USG FLEX is a firewall from China-based Hopkins Technology Zyxel. It provides flexible VPN options IPsec, SSL, or L2TP to provide flexible and secure remote access for remote work and management. A security vulnerability exists in Zyxel USG FLEX versions 5.00 through 5.21. An attacker could...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM Corporation. IBM Robotic Process Automation version 21.0.1 contains an authorization issue vulnerability that stems from the application's lack of privilege restrictions on queue deletion, which could be exploited by ...

CVE-2022-28507

Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting XSS via Dragon path router admin page...

CVE-2021-25266

creationtimestamp| type| source ---|---|--- 2022-04-27 20:13:31+00:00| seen| https://t.me/cibsecurity/41521...

UBUNTU-CVE-2022-21449

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows...

Juniper Networks Junos OS 跨站脚本漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A cross-site scripting vulnerability exists in Juniper Networks Junos OS J-Web, which allows an attacker to construct a UR...

USN-5340-1 ckeditor vulnerabilities

Kyaw Min Thein discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS. CVE-2018-9861 Micha Bentkowski discovered that CKEditor incorrectly handled certain inputs. An attacker could...

USN-5332-1 bind9 vulnerabilities

Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bogus NS records when using forwarders. A remote attacker could possibly use this issue to manipulate cache results. CVE-2021-25220 It was discovered that Bind incorrectly handled certain crafted TC...

CVE-2021-39721

creationtimestamp| type| source ---|---|--- 2022-03-16 17:26:56+00:00| seen| https://t.me/cibsecurity/39066...

CVE-2021-23246

creationtimestamp| type| source ---|---|--- 2022-03-11 20:15:06+00:00| seen| https://t.me/cibsecurity/38805...

Veritas System Recovery安全漏洞

Veritas System Recovery is a system recovery software from Veritas, USA. The software provides Windows systems with the ability to recover a corrupted system without reinstalling the system. A security vulnerability exists in Veritas System Recovery VSR 18 and 21, which originates from storing...