1203 matches found
PYSEC-2021-104
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available for using in TAL...
PT-2021-19833 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.11 Nextcloud Server versions prior to 20.0.10 Nextcloud Server versions prior to 21.0.2 Description: The issue arises when an attacker converts a Files Drop link to a federated share, causing problems o...
PT-2021-19832 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.11 Nextcloud Server versions prior to 20.0.10 Nextcloud Server versions prior to 21.0.2 Description: The issue allows an attacker to gain write/read privileges on any Federated File Share. This can also...
CVE-2021-29052
Affected products: Liferay Portal 7.3.0–7.3.5 and Liferay DXP 7.3 before fix pack 1. Issue: Data Engine module fails to check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, enabling remote authenticated users to view DDMStructures via GET API call...
CVE-2021-25694
Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixels elsewhere...
CVE-2021-20095
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
BELL-CVE-2021-2163 CVE-2021-2163 does not affect BellSoft software
Bulletin has no description...
CVE-2021-28464
VP9 Video Extensions Remote Code Execution Vulnerability...
CVE-2021-30161
An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 April 2021...
CVE-2021-26216
creationtimestamp| type| source ---|---|--- 2021-03-18 19:32:15+00:00| seen| https://t.me/cibsecurity/25120...
CVE-2021-28092
creationtimestamp| type| source ---|---|--- 2021-03-13 00:55:54+00:00| seen| https://t.me/cibsecurity/24880...
Adobe Animate 缓冲区错误漏洞
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.3 and earlier versions, which can be exploited by an unauthenticated attacker with the help of a malicious file to cause an information...
Epignosis EfrontPro 安全漏洞
Epignosis EfrontPro is a software application from Epignosis, Inc. An enterprise learning management system designed to deliver the most demanding and complex learning ecosystems beg... A security vulnerability exists in Epignosis EfrontPro version 5.2.21, which can be exploited by an attacker to...
Error Could not import the certificate when uploading external SSL certificate to Citrix Endpoint Management console
SSL Listener certificate might fail to import when uploading, with error "Could not import the certificate". Environment Citrix Endpoint Management version 21.1.1.3...
CVE-2020-4725
creationtimestamp| type| source ---|---|--- 2021-03-02 20:44:31+00:00| seen| https://t.me/cibsecurity/24350...
Veritas Backup Exec 安全漏洞
Veritas Technologies Veritas Backup Exec is a powerful suite of data backup and recovery tools from Veritas Technologies. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies installation and improves manageability...
CVE-2021-23975
creationtimestamp| type| source ---|---|--- 2021-02-26 07:38:26+00:00| seen| https://t.me/cibsecurity/24193...
CVE-2021-21620
creationtimestamp| type| source ---|---|--- 2021-02-24 18:36:50+00:00| seen| https://t.me/cibsecurity/24073...