2842 matches found
SUSE-RU-2021:2757-1 Recommended update for libarchive
This update for libarchive fixes the following issues: libarchive was updated to version 3.3.3 Avoid super-linear slowdown on malformed mtree files Many fixes for building with Visual Studio NOOVERWRITE doesn't change existing directory attributes New support for Zstandard read and write filters...
Advantech WebAccess/NMS 授权问题漏洞
Advantech WebAccess/NMS is a Web browser-based network management system NMS software package from Advantech, Taiwan, China.Advantech WebAccess/NMS is vulnerable to an authorization issue in versions prior to v3.0.3Build6299, which stems from the fact that the affected product has incorrect...
CVE-2020-18455
Cross Site Scripting XSS vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php...
Contiki 安全漏洞
Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki 3.0 that stems from improper handling of the ls command when there are many long name files in a directory. The vulnerability allows remote attackers to trigger...
Contiki 安全漏洞
Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki version 3.0 that stems from a potential non-terminating acknowledgement loop in the Telnet service used by Contiki. When the negotiation option has been disable...
3S-Smart Software Solutions CODESYS V3 Runtime Toolkit 安全漏洞
3s-smart Software Solutions 3S-Smart Software Solutions CODESYS V3 Runtime Toolkit is a comprehensive software development toolkit from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. 3S-Smart Software Solutions 3s-smart Software Solutions, Germany is a comprehensive software...
OpenPLC 代码注入漏洞
OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. A code injection vulnerability exists in OpenPLC v3, which originates from the failure of the Hardware Layer Code Box component of the /hardware page of the product's...
CVE-2020-20698
A remote code execution RCE vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file...
CVE-2020-20701
A stored cross site scripting XSS vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
OPENSUSE-SU-2021:2457-1 Security update for wireshark
This update for wireshark fixes the following issues: Update wireshark to 3.4.6. Including a fix for: - DVB-S2-BB dissector infinite loop bsc1186790...
Faraday Edge 跨站脚本漏洞
faraday Faraday Edge is an application from faraday, Inc. provides customized software-defined solutions and manages all network infrastructure from a single point. Faraday Edge had a security vulnerability prior to 3.7 that allowed XSS to create pages and their network name parameters over the...
Moodle 跨站脚本漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A cross-site scripting vulnerability exists in Moodle that stems from insufficient handling of user-supplied data passed to the test...
PT-2021-7872 · Offis +5 · Dcmtk +5
Name of the Vulnerable Software and Affected Versions: OFFIS DCMTK versions prior to 3.6.7 Description: The issue is related to a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition. This vulnerability is associated with errors in...
Vulnerabilities fixed in Cisco Identity Services Engine
Cisco has fixed vulnerabilities in Identity Services Engine ISE. An authenticated malicious person could exploit the vulnerabilities on the management interface to perform a stored Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser us...
PT-2021-20922 · Openvpn · Openvpn 3 Core Library
Name of the Vulnerable Software and Affected Versions: OpenVPN 3 Core Library versions 3.6 through 3.6.1 Description: The issue allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the...
Vulnerabilities fixed in Dell Wyse Management Suite
Dell has fixed vulnerabilities in Dell Wyse Management Suite. An authenticated remote malicious person could potentially potentially exploit them to perform a path traversal attack. This could gain read access to arbitrary files on the system. Dell has released updates to fix the vulnerabilities ...
CVE-2021-24386
The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malicious SVG and then perform XSS attacks by inducing another user to access the file directly. In v3.4, the plugin restricted such upload to...
Monstra CMS 跨站脚本漏洞
Monstra is a lightweight content management system CMS. A cross-site scripting vulnerability exists in Monstra version 3.0.4. The vulnerability can be exploited to conduct cross-site scripting attacks via the page function in admin/index.php...
SELinux Resource Management Error Vulnerability (CNVD-2021-52406)
SELinux is a Linux subsystem from the National Security Agency that uses a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from a use-after-free in the SELinux CIL compiler in the...