Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Payments in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this time...

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A stack overflow vulnerability exists in the GPU process in versions prior to Google Chrome 88.0.4324.182. No detailed vulnerability details are provided at this ti...

CVE-2020-29027

Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 9.3, which can be exploited by an attacker to potentially conduct Web caching attacks...

PT-2021-17180 · Roundcube +1 · Roundcube +1

Name of the Vulnerable Software and Affected Versions: Roundcube versions prior to 1.4.11 Description: The issue allows for an XSS attack through crafted Cascading Style Sheets CSS token sequences during the rendering of HTML email. This can occur when an attacker sends a specially designed email...

PT-2021-6549 · Faad2 +4 · Faad2 +4

Name of the Vulnerable Software and Affected Versions: faad2 versions prior to 2.10.0 Description: A heap-buffer-overflow issue exists in the stszin function located in mp4read.c, allowing an attacker to cause code execution. This issue can be exploited by a remote attacker to access confidential...

UBUNTU-CVE-2021-20216

A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability...

CVE-2021-25773

JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages...

JetBrains TeamCity 跨站脚本漏洞

TeamCity is a Java-based build management and continuous integration server from JetBrains. A reflected cross-site scripting vulnerability exists in JetBrains TeamCity versions prior to 2020.2. No detailed vulnerability details are provided at this time...

Jetbrains JetBrains Ktor framework 环境问题漏洞

Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...

CVE-2020-14192

Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. The affected versions are before version 4.8.4...

Harbor Authorization Issues Vulnerability

Harbor is an open source trusted cloud native registry from the Cloud Native Computing Foundation. The product is primarily used to store, sign, and scan container images for vulnerabilities. An authorization issue vulnerability exists in Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2, which stem...

Jinja2 Resource Management Error Vulnerability

Jinja2 is a Python based template engine. It has full Unicode support and provides an optional sandboxed template execution environment. A resource management error vulnerability exists in jinja2 from 0.0.0 and before 2.11.3, which stems from a ReDOS vulnerability in regex...

Wikindx Cross-Site Scripting Vulnerability

Wikindx is a virtual research environment online bibliography and quote/notes management and article creation system. Wikindx before 5.7.0 and 6.x through 6.4.0 suffers from a cross-site scripting vulnerability that originates from the message parameter in index.php?action=initLogon or...

PT-2021-15438 · Unknown · Nested-Object-Assign

Name of the Vulnerable Software and Affected Versions: nested-object-assign versions prior to 1.0.4 Description: The issue concerns Prototype Pollution via the default function. Recommendations: For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue...

OpenLDAP Invalid Pointer Release Vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. An invalid pointer release vulnerability exists in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a slapd crash in saslAuthzTo processing...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 85. An attacker could gain access to hosts on an internal network as well as services running on a user's local computer...

PT-2021-5551 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.57 Description: The issue is related to an incompatible type access in the OpenLDAP protocol implementation. It allows a remote attacker to send a specially crafted request to slapd, potentially leading to a...

Google Chrome Resource Management Error Vulnerability (CNVD-2021-05124)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in versions of Google Chrome prior to 81.0.4044.92, which allows remote attackers to execute arbitrary code...

Cisco Data Center Network Manager Certificate Validation Vulnerability (CNVD-2021-09939)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A certificate validation vulnerability exists in Cisco Data Center Network Manager...