CVE-2021-25945

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

PT-2021-16926 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.26 Description: A missing token check causes a CSRF issue in the "AJAX reordering endpoint". Recommendations: For Joomla! versions 3.0.0 through 3.9.26, update to a version that includes the fix for the...

0.extends.fc (1.0.65), 0.extends.react (1.0.51) +398 more potentially affected by CVE-2021-23400 via nodemailer (>=6.0.0, <=6.6.0)

nodemailer NPM version =6.0.0, =1.0.49, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =2.4.4 and more Source cves: CVE-2021-23400 Source advisory: SNYK:JS-NODEMAILER-1296415...

CVE-2020-4850

IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused by the leftover files after configuration. IBM X-Force ID: 190298...

ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS

A buffer overflow vulnerability in FloydSteinbergDitheringC in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

httpd: mod_http2 concurrent pool usage

A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...

Moodle 信息泄露漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the application exporting too much data. A remote attacker...

PT-2021-16869 · 101 +2 · 101

Name of the Vulnerable Software and Affected Versions: 101 versions 1.0.0 through 1.6.3 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution. Recommendations: For versions 1.0.0 through 1.6.3, at the moment, there is no information about a...

CVE-2021-20391

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...

Adobe Magento 输入验证错误漏洞

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides features such as rights management, search engine and payment gateway. An input validation error vulnerability exists in Adobe Magento. The vulnerability exists due ...

3architecture (>=1.0.0, <=1.7.0), @1amageek/tradable (0.9.0) +1596 more potentially affected by CVE-2020-7768 via grpc (>=1.0.0, <=1.24.3)

grpc NPM version =1.0.0, =1.0.0, =1.0.24, =0.0.2, =1.1.6, =0.0.1, =0.1.0, =1.2.1, =0.0.0-7, =1.0.0, =1.1.0 - @ampretia/composer-opus 0.2.0 - @andregarvin/cuneiform 0.0.1 and more Source cves: CVE-2020-7768 Source advisory: OSV:GHSA-PP75-XFPW-37G9...

@gearedminds/tsed-api-support (2.0.0), @kabuce/api (0.0.1-alpha.42) +18 more potentially affected by CVE-2020-7748 via @tsed/core (>=5.0.1, <=5.65.6)

@tsed/core NPM version =5.0.1, =5.0.4, =5.0.4, =5.0.4, =5.34.2, =5.60.0, =5.0.4, =5.0.4, =5.34.2, =5.45.0, =5.60.0, =5.34.2, =5.0.4, =5.0.4, =5.47.0 and more Source cves: CVE-2020-7748 Source advisory: OSV:GHSA-77XQ-CPVG-7XM2...

@random-guys/coralpay-pgp (>=0.0.1, <=0.1.0), @woocommerce/components (>=1.0.0, <=1.0.1) +4 more potentially affected by CVE-2020-7719 via locutus (>=2.0.10, <=2.0.11)

locutus NPM version =2.0.10, =0.0.1, =1.0.0, =1.1.0, =1.0.2, =1.0.52, =0.1.0, =0.2.1 Source cves: CVE-2020-7719 Source advisory: OSV:GHSA-F98M-Q3HR-P5WQ...

GHSA-CF4H-3JHX-XVHQ Arbitrary Code Execution in underscore

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized...

CVE-2021-22208

An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update...

Fortinet FortiNAC 权限许可和访问控制问题漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. FortiNAC suffers from a privilege permission and access control issue vulnerability that arises from an application not...

PT-2021-4074 · Unknown +1 · Mod Auth Openidc +1

Name of the Vulnerable Software and Affected Versions: mod auth openidc versions 2.4.0 through 2.4.7 Description: The issue is related to an uncontrolled consumption of resources, which can be exploited by a remote attacker to cause a denial-of-service DoS condition. The exact vectors used for th...

F5 BIG-IP 代码注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A code injection vulnerability exists in BIG-IP, which is caused by improper resource management within TMM. The following...

PT-2021-15464 · Unknown · Browserslist

Name of the Vulnerable Software and Affected Versions: browserslist versions 4.0.0 through 4.16.5 Description: The issue concerns a Regular Expression Denial of Service ReDoS that occurs during the parsing of queries. Recommendations: For versions 4.0.0 through 4.16.5, update to a version after...

browserslist 安全漏洞

browserslist is a software application. It is used to share the configuration of target browsers and Node.js versions between different front-end tools. A security vulnerability exists in browserslist from version 4.0.0 to 4.16.5, which stems from vulnerability to regular expression denial of...