WordPress插件 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Cross-site request forgery vulnerability exists in the...

CVE-2021-24156

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users Contributor to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation...

GitLab gitlab-vscode-extension 代码问题漏洞

Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A command injection vulnerability exists in NETGEAR that allows command injection by an authenticated user. The following products and versio...

CVE-2021-27908

In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the applicatio...

UBUNTU-CVE-2019-14831

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link...

SUSE-SU-2021:0887-1 Security update for python36

This update for python36 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379...

OPENSUSE-SU-2021:0443-1 Security update for privoxy

This update for privoxy fixes the following issues: Update to version 3.0.32: - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanner:...

CVE-2021-20676

M-System DL8 series type A DL8-A versions prior to Ver3.0, type B DL8-B versions prior to Ver3.0, type C DL8-C versions prior to Ver3.0, type D DL8-D versions prior to Ver3.0, and type E DL8-E versions prior to Ver3.0 allows remote authenticated attackers to bypass access restriction and conduct...

Sean DuBois Pion WebRTC 安全漏洞

Sean DuBois Pion WebRTC is Sean DuBois an open source application . Pion WebRTC is a Go implementation of WebRTC. A security vulnerability exists in Pion WebRTC before 3.0.15, which stems from not properly closing DTLS connections...

PT-2021-14667 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Jenkins Role-based Authorization Strategy Plugin versions 3.1 and earlier Description: The issue arises from an incorrect permission check, allowing attackers with Item/Read permission on nested items to access them even if they lack Item/Rea...

Vulnerabilities fixed in Jira

Vulnerabilities have been fixed in JIRA. The vulnerabilities allow a malicious person to perform a Cross-Site Scripting attack and to obtain system data. Atlassian categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 8.2. Atlassian has released updates to addre...

Mutare Voice Security Vulnerability

A security vulnerability exists in Mutare Voice EVM 3.x before 3.3.8 that allows anyone to export database tables...

Psyprax Security Vulnerability

A security vulnerability exists in Psyprax before 3.2.2 that stems from the file %PROGRAMDATA%Psyprax32PPScreen.ini containing the application lock screen hash. If this entry is removed, the lock screen will no longer be displayed...

Mautic 跨站脚本漏洞

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. Mautic 3.2.4 suffers from a cross-site scripting vulnerability that allows remote attackers to inject executable JavaScript via the Referer header of an...

Delta Electronics ISPSoft Access Control Error Vulnerability

Delta Electronics ISPSoft is a set of PLC Programmable Logic Controller programming software from Delta Electronics, Taiwan, China. An Access Control Error Oh vulnerability exists in Delta Electronics ISPSoft v3.12 and prior, which arises when a networked system or product does not properly...

SUSE-SU-2021:0182-1 Security update for yast2-multipath

This update for yast2-multipath to version 3.1.9 fixes the following issues: Security issue fixed: - CVE-2018-17955: Use random file name instead of static names bsc1117592. Non-security issue fixed: - Removed calls to /sbin/insserv bsc1026027...

M&M Fdtcontainer Code Issue Vulnerability

M&M Fdtcontainer is a plug-and-play FDT framework application that can be customized to meet the needs of customers by China Meiming M&M. A code issue vulnerability exists in M&M fdtCONTAINER component Version 3, which can be exploited by an attacker to load a manipulated project file and malicio...

Cisco SD-WAN 输入验证错误漏洞

Cisco SD-WAN vEdge is a router from Cisco. Cisco SD-WAN vManage is a software that provides software-defined networking capabilities from Cisco. The software provides a way to virtualize the network. A buffer overflow vulnerability exists in several Cisco SD-WAN products. The vulnerability stems...

OPENSUSE-SU-2021:0122-1 Security update for vlc

This update for vlc fixes the following issues: Update to 3.0.11.1: - CVE-2020-13428: Fixed heap-based buffer overflow in the hxxxAnnexBtoxVC boo1172727 - CVE-2020-26664: Fixed heap-based buffer overflow in EbmlTypeDispatcher:send boo1180755 This update was imported from the...