CVE-2021-21365

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custo...

PT-2023-12138 · Mediawiki +1 · Visualeditor +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.31 through 1.31.12 MediaWiki versions 1.32.x through 1.35.1 Description: An issue was discovered in the VisualEditor extension. When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden,...

OPENSUSE-SU-2021:0592-1 Security update for opera

This update for opera fixes the following issues: - Opera was updated to version 75.0.3969.171 boo1184256 CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199, CVE-2021-21191, CVE-2021-21192, CVE-2021-21193...

PT-2021-19972 · Zoho · Zoho Manageengine Opmanager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine OpManager versions prior to 12.5.329 Description: The issue allows unauthenticated remote code execution due to a general bypass in the deserialization class. This could potentially lead to exposure of sensitive data or...

PT-2021-4592

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.11 Nokogiri versions prior to 1.11.4 Description The issue is related to a flaw in the xml entity encoding functionality, which could trigger an out-of-bounds read if a crafted file is processed by an application...

SUSE-SU-2021:1280-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - Update to 2.5.9 - CVE-2021-28965: XML round-trip vulnerability in REXML bsc1184644...

PT-2021-2797 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can allow an attacker to gain unauthorized access to modify, add, or delete...

SUSE-SU-2021:1190-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 - CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 - Fix errors when scannin...

SUSE-SU-2021:14692-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 - CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 - Fix errors when scannin...

PT-2021-18153 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions prior to 8.8.2 Description: The issue arises when Apache Solr is started with specific configurations, such as the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider, and there is no existing security.json...

PT-2021-7238 · Siemens +1 · Scalance +2

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions prior to 6.5 Description: The issue is related to a possible heap overflow in the DHCP client of Wind River VxWorks. This could allow a remote attacker to execute arbitrary code. The vulnerability is also present i...

MGASA-2021-0179 Updated rygel packages fix a security vulnerability

The rygel packages has been updated to version 0.40.1, fixing security issue and other bugs...

PT-2021-7353 · Apache +6 · Apache Subversion +6

Name of the Vulnerable Software and Affected Versions: Apache Subversion versions prior to the fixed version Description: The issue is related to improper authorization in the centralized version control system Apache Subversion. Exploitation of this issue allows a remote attacker to access...

Mort Bay / Eclipse Jetty End of Life (EOL) Detection - Windows

The Mort Bay / Eclipse Jetty version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2021-18627 · Unknown · Liquidfiles

Name of the Vulnerable Software and Affected Versions: LiquidFiles versions 3.4.15 Description: The issue is related to stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML/JavaScript content,...

PT-2021-3354 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.31.12 MediaWiki versions 1.32.x through 1.35.x before 1.35.2 Description: An issue in MediaWiki leads to XSS due to the output of mediastatistics-header- messages in HTML unescaped on Special:NewFiles. This could...

PT-2021-11997 · Unknown +3 · Ngx Http Lua Module +3

Name of the Vulnerable Software and Affected Versions: ngx http lua module aka lua-nginx-module versions prior to 0.10.16 Description: The issue allows unsafe characters in an argument when using the API to mutate a URI, or a request or response header. Recommendations: For versions prior to...

CVE-2021-22548

An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit...

PT-2021-6993 · Red Hat +2 · Resteasy +2

Name of the Vulnerable Software and Affected Versions: RESTEasy versions up to 4.6.0.Final Description: A flaw was found in RESTEasy where the endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to...

SUSE-SU-2021:0947-1 Security update for python3

This update for python3 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379...