CVE-2021-2432

Vulnerability in the Java SE product of Oracle Java SE component: JNDI. The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

Fortinet FortiMail SQL Injection Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. A security vulnerability exists in Fortinet FortiMail that can be exploited by an attacker to execute unauthorized code or commands via...

Sql injection

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...

CVE-2021-24007

Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...

CVE-2021-24007

CVE-2021-24007 affects Fortinet FortiMail. The FortiMail SQL Injection vulnerabilities are due to multiple improper neutralization of special elements of SQL commands, allowing a non-authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests. The issue is ...

CVE-2021-22129

Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow an authenticated attacker with regular webmail access to trigger a buffer overflow and to possibly execute unauthorized code or commands via specifically...

CVE-2021-22129

CVE-2021-22129 affects Fortinet FortiMail before 6.4.5, where multiple instances of incorrect calculation of buffer size in FortiMail Webmail and Admin interfaces may allow an authenticated attacker with regular Webmail access to trigger a buffer overflow and possibly execute unauthorized code or...

Code injection

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation...

Design/Logic Flaw

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a...

CVE-2020-28870

CVE-2020-28870 affects InoERP 0.7.2, where lack of validations in /modules/sys/form_personalization/json_fp.php enables an unauthorized attacker to execute arbitrary server-side code. Multiple sources (NVD, Red Hat advisory, other vendor trackers) document remote code execution potential with hig...

New Docker Container Escape Bug Affects Microsoft Azure Functions

Cybersecurity researcher Paul Litvak today disclosed an unpatched vulnerability in Microsoft Azure Functions that could be used by an attacker to escalate privileges and escape the Docker container used for hosting them. The findings come as part of Intezer Lab's investigations into the Azure...

Multiple Vulnerabilities in Zhiyuan OA

Founded in March 2002 and headquartered in Beijing, Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet has always been focusing on the field of enterprise-level management software, and is a high-tech enterprise integrating product design, research and development, sales and service. The...

About the security content of iOS 14.3 and iPadOS 14.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple iOS Security Vulnerability

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple Apple. A security vulnerability exists in Apple iOS 12, where unauthorized code execution may result in a violation of authentication policies. The following products and versions are affected: iPho...

About the security content of watchOS 6.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of iOS 12.5 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of iOS 12.5

About the security content of iOS 12.5 This document describes the security content of iOS 12.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

SaltStack Salt API Arbitrary Code Execution Vulnerability

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack. An input validation vulnerability exists in the SaltStack Salt API that can be exploited by a remote attacker to submit a special request for unauthorized access to arbitrary code...

CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...

CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...