PT-2021-22776 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 14.3.6 GitLab CE/EE versions 14.4 prior to 14.4.4 GitLab CE/EE versions 14.5 prior to 14.5.2 Description: A collision in access memoization logic leads to potential elevated privileges in groups and projects und...

UBUNTU-CVE-2021-43815

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerabili...

Raspberry Pi Os安全漏洞

Raspberry Pi Os is a minimized image from the UK Raspberry Pi Foundation based on the latest version of Debian. Raspberry Pi Os suffers from a security vulnerability that stems from the fact that operating systems prior to Raspberry Pi 5.10 have default passwords for Raspberry Pi accounts, which...

PT-2021-6936 · Mozilla +7 · Firefox Esr +9

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 95 Firefox ESR versions prior to 91.4.0 Thunderbird versions prior to 91.4.0 Description: The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to r...

WordPress 插件跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress LoginWP plugin has a cross-site scripting vulnerability in versions prior to 3.0.0.5, which...

AZL-6949 CVE-2021-4019 affecting package vim for versions less than 8.2.4081-1

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-36329

Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...

Cryptshare Ag Cryptshare 输入验证错误漏洞

Cryptshare Ag Cryptshare is a web application from Cryptshare Ag, Germany. It is used to securely serve files and messages. An input validation error vulnerability vulnerability exists in Cryptshare Ag Cryptshare.The product from which the vulnerability originates does not effectively handle data...

AZL-6508 CVE-2021-44225 affecting package keepalived for versions less than 2.2.7-1

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable writable property...

AZL-7414 CVE-2021-39926 affecting package wireshark for versions less than 3.4.14-1

Buffer overflow in the Bluetooth HCIISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file...

Sharetribe Go 操作系统命令注入漏洞

Sharetribe Go is a source-available marketplace software from the Sharetribe team. An OS command injection vulnerability exists in versions of Sharetribe Go prior to 10.2.1, users who are unable to upgrade should set the snsnotificationtoken configuration parameter to a confidential value...

CVE-2021-36329

Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...

CVE-2021-43554

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

CVE-2021-43362

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...

PT-2021-23886 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: A Use-After-Free Remote issue exists when reading a DWG file using the parsing functionality. The issue results from the lack of validating the existence of an object...

PT-2021-22653 · Unknown · Ipack Scada

Name of the Vulnerable Software and Affected Versions: Ipack SCADA Software versions prior to 1.1.0 Description: The issue is related to improper handling of parameters, allowing Blind SQL Injection. This can potentially be exploited to extract or modify sensitive data from the database...

CVE-2021-23162

Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Connect for Android 15 versions prior to 15.04.040; version 14 and prior versions...

GNU Mailman 跨站脚本漏洞

GNU Mailman is a free suite of software from the GNU community for managing e-mail discussions and e-mail lists. The software can be integrated with Web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding processing, conte...

OpenZeppelin 安全漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in versions of OpenZeppelin Contracts prior to 4.3.2, which can be exploited by an attacker to conduct an uninitialized contract attack...

PT-2021-23073 · Zoho · Zoho Manageengine Network Configuration Manager

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Network Configuration Manager versions prior to 125465 Description: The issue is related to SQL Injection in the hardware details search function. Recommendations: For versions prior to 125465, update to a version that...