CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

Subreddit Home Automation 跨站请求伪造漏洞

Subreddit Home Automation is an automation device for the Subreddit community. An automated electric light. A cross-site request forgery vulnerability exists in HomeAutomation version 3.3.2 that allows a user to perform certain actions via an HTTP request without performing any validity checks to...

PT-2021-16738 · Unknown · Capital Embedded Ar Classic +3

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions all through V2303 Nucleus NET versions all Nucleus ReadyStart V3 versions all through V2017.02.4 Nucleus ReadyStart V4 versions all through V4.1.0...

Minor update (4) for Vivaldi Desktop Browser 3.7

Download Vivaldi The following improvements were made since the third 3.7 stable, minor update: ChromiumSecurity Backported patch for issue under active attack CVE-2021-21224 Main photo byJason Hafso...

SUSE-SU-2021:1152-1 Security update for spamassassin

This update for spamassassin fixes the following issues: - spamassassin was updated to version 3.4.5 - CVE-2019-12420: memory leak via crafted messages bsc1159133 - CVE-2020-1946: security update bsc1184221...

WordPress插件 跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Cross-site request forgery vulnerability exists in the...

GitLab gitlab-vscode-extension 代码问题漏洞

Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...

Netgear NETGEAR 命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A command injection vulnerability exists in NETGEAR that allows command injection by an authenticated user. The following products and versio...

CVE-2021-27908

In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the applicatio...

UBUNTU-CVE-2019-14831

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open redirect if forced subscription mode was enabled. If a forum's subscription mode was set to "forced subscription", the forum's subscribe link...

SUSE-SU-2021:0887-1 Security update for python36

This update for python36 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379...

OPENSUSE-SU-2021:0443-1 Security update for privoxy

This update for privoxy fixes the following issues: Update to version 3.0.32: - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanner:...

Sean DuBois Pion WebRTC 安全漏洞

Sean DuBois Pion WebRTC is Sean DuBois an open source application . Pion WebRTC is a Go implementation of WebRTC. A security vulnerability exists in Pion WebRTC before 3.0.15, which stems from not properly closing DTLS connections...

PT-2021-14667 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Jenkins Role-based Authorization Strategy Plugin versions 3.1 and earlier Description: The issue arises from an incorrect permission check, allowing attackers with Item/Read permission on nested items to access them even if they lack Item/Rea...

Vulnerabilities fixed in Jira

Vulnerabilities have been fixed in JIRA. The vulnerabilities allow a malicious person to perform a Cross-Site Scripting attack and to obtain system data. Atlassian categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 8.2. Atlassian has released updates to addre...

Mutare Voice Security Vulnerability

A security vulnerability exists in Mutare Voice EVM 3.x before 3.3.8 that allows anyone to export database tables...

Psyprax Security Vulnerability

A security vulnerability exists in Psyprax before 3.2.2 that stems from the file %PROGRAMDATA%Psyprax32PPScreen.ini containing the application lock screen hash. If this entry is removed, the lock screen will no longer be displayed...

Mautic 跨站脚本漏洞

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. Mautic 3.2.4 suffers from a cross-site scripting vulnerability that allows remote attackers to inject executable JavaScript via the Referer header of an...

Delta Electronics ISPSoft Access Control Error Vulnerability

Delta Electronics ISPSoft is a set of PLC Programmable Logic Controller programming software from Delta Electronics, Taiwan, China. An Access Control Error Oh vulnerability exists in Delta Electronics ISPSoft v3.12 and prior, which arises when a networked system or product does not properly...

SUSE-SU-2021:0182-1 Security update for yast2-multipath

This update for yast2-multipath to version 3.1.9 fixes the following issues: Security issue fixed: - CVE-2018-17955: Use random file name instead of static names bsc1117592. Non-security issue fixed: - Removed calls to /sbin/insserv bsc1026027...