2231 matches found
IBM Spectrum Protect 缓冲区错误漏洞
IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...
pczupil X2CRM 跨站脚本漏洞
pczupil X2CRM is a pczupil open source application. A next generation open source social selling application for small and medium sized businesses. A cross-site scripting vulnerability exists in pczupil X2CRM version 7.1, which can be exploited to inject arbitrary web script or HTML via the...
Cisco IOS XR 参数注入漏洞
Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A command injection vulnerability exists in the CLI of Cisco IOS XR versions prior to 7.3.1. The vulnerability stems from insufficient input validation of user-supplied commands. An...
Proofpoint Insider Threat Management Server 跨站脚本漏洞
Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. A cross-site scripting vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1, which allows for the...
Proofpoint Insider Threat Management Server 安全漏洞
Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. An authorization bypass vulnerability exists in Proofpoint Insider Threat Management Server versions prior to 7.11.1, which stems from the...
Knowage SQL注入漏洞
Knowage is a suite of open source tools for modern business analytics. A SQL injection vulnerability exists in the documentexecution/url analysis driver component of Knowage prior to version 7.4 when running reports. An attacker can exploit this vulnerability to execute arbitrary SQL commands on ...
Knowage 跨站脚本漏洞
Knowage is a suite of open source tools for modern business analytics. A reflective cross-site scripting vulnerability exists in Knowage versions prior to 7.4. The vulnerability can be exploited to inject arbitrary external scripts into /restful-services/publish via the 'EXECFROM' parameter, whic...
CLSA-2021-1617285762 Fix of CVE-2021-22876
back-port urlapi from v7.75.0 used by CVE-2021-22876 - strip credentials from the auto-referer header CVE-2021-22876...
PT-2021-14904 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 7.1 and later Description: An issue has been discovered in GitLab where a member of a private group was able to validate the use of a specific name for a private project. Recommendations: For GitLab versions 7.1 and later, at...
CVE-2021-21438
Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...
CVE-2020-24505
Insufficient input validation in the firmware for the IntelR 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access...
Keycloak security vulnerability
A security vulnerability exists in Keycloak 7.0.1 that originates from an account email enumeration attack by a logged in user...
CVE-2021-26528
The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...
CVE-2021-21434
Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface i.e. another agent who wants to make changes in the survey. This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions...
PT-2021-14507 · Otrs Ag +1 · Otrs +1
Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS versions 7.0.x through 7.0.23 OTRS AG OTRS versions 8.0.x through 8.0.10 Description: The issue concerns the exposure of Article Bcc fields and agent personal information when a customer prints a ticket in PDF format via an...
CVE-2021-20623
Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request...
CVE-2021-21291
OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers Google, GitHub, and others to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the whitelist domain feature, a domain that ended in...
CVE-2020-5032
IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178...
CVE-2020-1723
A flaw was found in Keycloak Gatekeeper Louketo. The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper Louketo: 6.0.1, 7.0.0...