Mozilla Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in the raw-cpuid crate function in versions of Rust prior to 9.0.0 that allows the cpuid count call to be made even if the processor does not support the cpuid directive, ultimate...

Atlassian Bamboo 信息泄露漏洞

Atlassian Bamboo is a Java-based server-side application for continuous integration builds from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 7.2.2 that allows an unauthenticated, remote attacker to view a stack trace...

CVE-2020-27295

The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller versions prior to 6.3.0.8233...

PT-2021-16982 · Cpanel · Cpanel

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 92.0.9 Description: The issue allows a MySQL user with an old-style password hash to bypass suspension. Recommendations: For versions prior to 92.0.9, update to version 92.0.9 or later to resolve the issue...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust glsl-layout crate before 0.4.0, which stems from double deletion of maparray when panic occurs. No details of the vulnerability are provided at this time...

CVE-2021-2111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

UBUNTU-CVE-2021-2125

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Cisco Data Center Network Manager SQL注入漏洞

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SQL injection vulnerability exists in the REST API endpoint of Cisco Data Center...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Media in versions prior to Google Chrome 88.0.4324.96. A remote attacker can cause heap damage via a carefully crafted...

CVE-2020-28478

This affects the package gsap before 3.6.0...

FasterXML jackson-databind 代码问题漏洞

FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can be converted to json, xml Java objects . A code issue vulnerability exists in...

Linux kernel path traversal vulnerability (CNVD-2021-05132)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions prior to 5.10.7, which stems from insufficient identifier checking in drivers/target/targetcorexcopy.c, and can be...

CVE-2021-23835

An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docsfile HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter which retrieves the contents of the specified...

Cisco Video Surveillance 8000 Series IP Cameras 缓冲区错误漏洞

The Cisco Video Surveillance 8000 series is a video surveillance IP camera from Cisco. A denial of service vulnerability exists in the Cisco Discovery Protocol implementation of the Cisco Video Surveillance 8000 Series prior to version 1.0.9-8, which can be exploited by an attacker to cause the...

PT-2021-11537 · Npm +5 · Glob-Parent +5

Name of the Vulnerable Software and Affected Versions: glob-parent versions prior to 5.1.2 Description: The issue is related to the enclosure regex used to check for strings ending in enclosure containing path separator. Recommendations: For versions prior to 5.1.2, update to version 5.1.2 or lat...

ALPINE-CVE-2021-3121

An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue...

Citrix Secure Mail For Android Access Control Error Vulnerability

Citrix Secure Mail For Android is an email client software from Citrix. An access control error vulnerability exists in Citrix Secure Mail for Android in versions prior to 20.11.0. The vulnerability is related to the affected version allowing unauthenticated users to read calendar-related data...

WordPress PageLayer plugin license issue vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress PageLayer plugin versions prior to 1.1.2 that stems fro...

Citrix Secure Mail For Android Code Injection Vulnerability

Citrix Secure Mail For Android is an email client software from Citrix, Inc. A code injection vulnerability exists in Citrix Secure Mail for Android before 20.11.0, which allows unauthenticated access to read data stored in Secure Mail...