4621 matches found
Aruba Networks AirWave Management Platform 代码问题漏洞
Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...
Aruba Networks AirWave Management Platform 代码问题漏洞
Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML external entity injection vulnerability exists in Aruba Networ...
Avaya Equinox Conferencing 代码问题漏洞
Avaya Equinox Conferencing is a conferencing support software from Avaya, USA. The software is a universal solution that includes all Avaya soft clients with the convergence of Avaya Aura Conferencing and Scopia for cell phones, browsers, desktops and conference room systems. A code issue...
DEBIAN-CVE-2021-31826
Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...
NLnet Labs Unbound 输入验证错误漏洞
Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the size calculation in respip/respip.c in versions of Unbound prior to 1.9.5. No detailed vulnerability details are provided at this time...
UBUNTU-CVE-2021-21211
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PT-2021-15478
Name of the Vulnerable Software and Affected Versions postcss versions prior to 7.0.36 postcss versions 8.0.0 through 8.2.13 Description The issue is related to Regular Expression Denial of Service ReDoS via the getAnnotationURL and loadAnnotation functions in lib/previous-map.js. The vulnerable...
Google Chrome 权限许可和访问控制问题漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. An attacker can exploit the vulnerability to bypass navigation restrictions...
Foreman 安全漏洞
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman versions prior to 2.5.0 that can be exploited by an attacker ...
CVE-2021-2285
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2021-2306
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
亚马逊 Amazon FreeRTOS 输入验证错误漏洞
Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An integer overflow vulnerability exists in streambuffer.c in Amazon FreeRTOS versions prior to 10.4.3. No details of the vulnerability are provided at this time...
OMICRON StationGuard 资源管理错误漏洞
OMICRON StationGuard is an application from OMICRON Austria. It is used for network monitoring. A security vulnerability exists in OMICRON StationGuard versions prior to 1.10, which allows remote attackers to send a denial of service connection drop via a crafted tcp 20499 packet to the CTRL...
CVE-2021-3498
GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files...
CVE-2021-22879
Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation...
Zulip 安全漏洞
Zulip server is an open source team chat application from the American company Zulip. A security vulnerability exists in Zulip Server versions prior to 3.4 that stems from a public API that causes guest users to be able to receive message traffic from a public stream that should only be accessibl...
Per Nilsson yubihsm-connector 安全漏洞
Per Nilsson yubihsm-connector is a Per Nilsson open source application. A self-documenting file is provided. A security vulnerability exists in Yubico yubihsm-connector versions prior to 3.0.1, which stems from the handler not validating the length of a request...
PT-2021-12082 · Gin · Gin-Gonic/Gin
Name of the Vulnerable Software and Affected Versions: gin-gonic/gin versions prior to 1.6.0 Description: The issue allows remote attackers to inject arbitrary log lines due to unsanitized input in the default logger. This can be achieved by manipulating the request path, which affects the defaul...
CVE-2021-22720
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring a project...
