865 matches found
CVE-2021-22876
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header...
Mozilla: Internal network hosts could have been probed by a malicious webpage
Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...
EPrints cross-site scripting vulnerability (CNVD-2021-14776)
EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. A reflected cross-site scripting vulnerability exists in the year parameter of the cgi/cal URI in EPrints 3.4.2. No detailed vulnerability details are provided at this time...
CVE-2021-0401
creationtimestamp| type| source ---|---|--- 2021-02-27 00:39:36+00:00| seen| https://t.me/cibsecurity/24256...
CVE-2021-26595
creationtimestamp| type| source ---|---|--- 2021-02-23 22:35:15+00:00| seen| https://t.me/cibsecurity/24024...
CVE-2020-14359
creationtimestamp| type| source ---|---|--- 2021-02-23 16:35:01+00:00| seen| https://t.me/cibsecurity/23982...
CVE-2021-3204
creationtimestamp| type| source ---|---|--- 2021-02-19 16:51:15+00:00| seen| https://t.me/cibsecurity/23858...
CVE-2021-20410
IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190...
CVE-2020-5032
creationtimestamp| type| source ---|---|--- 2021-02-04 20:40:26+00:00| seen| https://t.me/cibsecurity/23092...
CVE-2021-26023
creationtimestamp| type| source ---|---|--- 2021-02-04 00:29:15+00:00| seen| https://t.me/cibsecurity/23042...
CVE-2020-21179
creationtimestamp| type| source ---|---|--- 2021-02-01 21:25:09+00:00| seen| https://t.me/cibsecurity/22910...
CVE-2021-23329
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below...
CVE-2021-2130
creationtimestamp| type| source ---|---|--- 2021-01-20 18:37:28+00:00| seen| https://t.me/cibsecurity/22376...
CVE-2021-2014
creationtimestamp| type| source ---|---|--- 2021-01-20 18:33:24+00:00| seen| https://t.me/cibsecurity/22357...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2021-04797)
Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier. ...
CVE-2021-22166
creationtimestamp| type| source ---|---|--- 2021-01-15 18:51:09+00:00| seen| https://t.me/cibsecurity/22213...
CVE-2021-1715
creationtimestamp| type| source ---|---|--- 2021-01-12 22:54:52+00:00| seen| https://t.me/cibsecurity/22002...
CVE-2020-27637
creationtimestamp| type| source ---|---|--- 2021-01-12 07:46:17+00:00| seen| https://t.me/cibsecurity/21919...