CVE-2021-27852

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

CVE-2021-30194

CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...

CVE-2021-24300

The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue...

Dell Hybrid Client 信息泄露漏洞

DELL Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. An information disclosure vulnerability exists in Dell Hybrid Client versions prior to 1.5, which can be exploited by a local, unauthenticated...

Unbound Infinite Loop Vulnerability

Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...

Unbound integer overflow vulnerability (CNVD-2021-32620)

Unbound is a DNS resolver that supports validation, recursion, and caching features. An integer overflow vulnerability exists in the region allocator in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an integer overflow via regionalloc...

NLnet Labs Unbound 缓冲区错误漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in rdatacopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an out-of-bounds write...

Unbound 安全漏洞

Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...

CVE-2021-2309

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2021-2303

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Diagnostic Assistant. The supported version that is affected is Prior to 2.12.41. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2021-0255 Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

Alpine Linux apk-tools 缓冲区错误漏洞

Alpine Linux is a lightweight Linux distribution for security applications. apk-tools is one of the shell-based package managers. A security vulnerability exists in Alpine Linux apk-tools versions prior to 2.12.5, which stems from a buffer overflow and crash allowed by the tarball parser...

Unspecified Vulnerability in Google Chrome (CNVD-2021-34540)

Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72. An attacker can exploit the vulnerability to spoof the security UI via a crafted HTML page...

CVE-2021-27180

An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail aka WorldClient. It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user...

nodejs-bootstrap-select: not escaping title values on <option> may lead to XSS

bootstrap-select before 1.13.6 allows Cross-Site Scripting XSS. It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser...

UBUNTU-CVE-2020-36309

ngxhttpluamodule aka lua-nginx-module before 0.10.16 in OpenResty allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header...

OpenResty 安全漏洞

Openresty OpenResty is a web application server based on Nginx and Lua from China Ou Rui Software Development Openresty. A security vulnerability exists in OpenResty versions prior to 0.10.16 that allows the use of unsafe characters in parameters...

F5 Networks BIG-IP : TMM vulnerability (K37451543)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.1 / 16.1.0 / Hotfix- BIGIP-14.1.4.0.120.11-ENG.iso / Hotfix-BIGIP-16.0.1.1.9.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K37451543 advisory. - On BIG-IP versions 14.1.4 and 16.0.1.1...

PT-2021-7695 · Unknown +1 · Net::Netmask +1

Name of the Vulnerable Software and Affected Versions: Net::Netmask versions prior to 2.0000 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string, which can allow attackers to bypass access control based on IP addresses...

ImageMagick heap buffer overflow vulnerability (CNVD-2021-23794)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A heap buffer overflow vulnerability exists in coders/tiff.c in versions of ImageMagick prior to 7.0.10-45. An attacker can exploit this vulnerability to cause a denial ...