CVE-2021-26085

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3...

CVE-2021-2355

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

@acaciomartins/react-native-simpletable (>=0.0.1 <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4 <=1.0.7) +1206 more potentially affected by CVE-2020-1920 via react-native (>=0.59.0 <=0.62.2)

react-native NPM version =0.59.0, =0.0.1, =1.0.4, =2.3.3, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.3.0, =0.1.0, =0.1.0, =0.1.1, =0.1.3 and more Source cves: CVE-2020-1920 Source advisory: OSV:GHSA-7F53-FMMV-MFJV...

Dell OpenManage Enterprise 安全漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. Dell OpenManage Enterprise versions 3.4 to 3.6.1 and OpenManage Enterprise-Modular versions 1.20.00 to 1.30.00 A remote code execution vulnerability exists. An...

putil-merge 安全漏洞

putil-merge is an open source solution for merging two or more objects. It supports deep merging, cloning attributes, copying descriptors and filtering. A security vulnerability exists in putil-merge, which stems from a prototype contamination vulnerability in "putil-merge" versions 1.0.0 through...

SAP NetWeaver AS ABAP 代码注入漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides web services, but is also the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS ABAP, which originates from a code injection in the product. The following products and versions a...

PT-2021-15273 · Brave · Brave Desktop

Name of the Vulnerable Software and Affected Versions: Brave Desktop versions 1.17 through 1.26.60 Description: The issue occurs when adblocking is enabled and a proxy browser extension is installed in Brave Desktop. The CNAME adblocking feature makes DNS requests using the system DNS settings...

Joomla! CMS 代码问题漏洞

is a set of forum components used in the Joomla! content management system. A code issue vulnerability exists in versions 2.5.0 to 3.9.27 of Joomla! that could be exploited by a remote, unauthenticated attacker to obtain or guess a session token and gain unauthorized access to a session belonging...

Joomla! CMS 输入验证错误漏洞

is a set of forum components used in the Joomla! content management system. Joomla! is vulnerable to an input validation error in versions 2.5.0 to 3.9.27, which can be exploited by attackers to cause corruption in the usergroups table...

PT-2021-16929 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.27 Description: An issue was discovered in Joomla! where missing validation of input could lead to a broken usergroups table. Recommendations: For Joomla! versions 2.5.0 through 3.9.27, update to a version...

PT-2021-16932 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.27 Description: An issue was discovered in the imagelist view of com media, where inadequate escaping leads to a XSS vulnerability. Recommendations: For versions 3.0.0 through 3.9.27, update to a version tha...

Joomla! 代码问题漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A code issue vulnerability exists in Joomla! 2.5.0 - 3.9.27. The vulnerability stems from a hard-coded ACL check for superuser missing from the install operation in cominstaller, which can be exploited to execute...

PT-2021-16928 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.27 Description: An issue was discovered in the JForm API, where inadequate escaping in the rules field leads to a XSS vulnerability. Recommendations: For versions 3.0.0 through 3.9.27, update to a version th...

just-safe-set 安全漏洞

just-safe-set is an npm module library. A security vulnerability exists in just-safe-set 1.0.0 through 2.2.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Grok Buffer Overflow Vulnerability

Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A security vulnerability exists in Grok versions 7.6.6 through 9.2.0 that stems from a heap-based buffer overflow in the...

LibreSSL 缓冲区错误漏洞

LibreSSL is an open source implementation of the Secure Sockets Layer and Transport Layer security protocols. A security vulnerability exists in LibreSSL that stems from LibreSSL 2.9.1 through 3.2.1 having an out-of-bounds read in asn1itemprintctx called from asn1templateprintctx. No details of t...

Apache Traffic Server 环境问题漏洞

Apache Traffic Server or ATS or TS for short , is a high-performance , modular HTTP proxy and caching server . A security vulnerability exists in Apache Traffic Server versions 7.0.0 - 7.1.12, 8.0.0 - 8.1.1, 9.0.0 - 9.0.1. An attacker can exploit this vulnerability to smuggle requests via invalid...

Istio 权限许可和访问控制问题漏洞

Istio is a set of open platforms for connecting, managing, and securing microservices. Istio is vulnerable to a privilege permission and access control issue that arises from an application that does not properly impose security restrictions. This vulnerability could allow an attacker to access...

Avaya Aura Device Services 代码注入漏洞

Avaya Aura Device Services is a software application from Avaya, USA. It provides a feature for managing Avaya endpoints. A security vulnerability exists in Avaya Aura Device Services versions 7.0 through 8.1.4.0, which can be exploited by local users to execute specially written scripts...