GHSA-893H-35V4-MXQX Path Traversal in Ansible

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

CVE-2021-3017

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

CVE-2021-3017

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

Code injection

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

CVE-2021-3017

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

CVE-2021-3017

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

CVE-2021-3017

Intelbras WIN 300 and WRN 342 routers (through 2021-01-04) suffer a credentials disclosure flaw: remote attackers can read the def_wirelesspassword line in the HTML source to obtain credentials. Affected component: web interface; root cause: improper exposure of sensitive data in HTML. Impact: po...

Intelbras IWR 3000N 安全漏洞

The Intelbras IWR 3000N is a wireless router from Intelbras Poland. A security vulnerability exists in Intelbras WIN 300 and WRN 342 devices version 2021-01-04 and earlier versions that allows remote attackers to discover credentials by reading the def wireless spassword line in the HTML source...

PT-2021-18644

Name of the Vulnerable Software and Affected Versions Intelbras WIN 300 and WRN 342 devices through 2021-01-04 Description The issue allows remote attackers to discover credentials by reading the def wirelesspassword line in the HTML source code of the web interface. Recommendations For Intelbras...

CVE-2021-3017: Undefined Security Weakness

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

PT-2021-6136

Name of the Vulnerable Software and Affected Versions vim versions prior to 8.2.4436 Description The issue is related to a heap-based buffer overflow in the vim text editor, specifically with the win lbr chartabsize function when using the vartabstop value. This can lead to a denial of service wh...

openSUSE Security Update : opera (openSUSE-2021-296)

This update for opera fixes the following issues : - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement clientcapabilities negotiation for Flow / Sync - DNA-90560 Search Tabs Open Tabs On Top - DNA-90620 Add opauto tests for...

Shijiazhuang Jiuwing Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-13488)

Shijiazhuang Nine Win Network Technology Co., Ltd. is referred to as Nine Win Interactive, with website construction, mobile Internet products, 720-degree panoramic display, VI visual design as the core business. Shijiazhuang Jiuwin Network Technology Co., Ltd. website building system SQL injecti...

openSUSE Security Update : opera (openSUSE-2021-139)

This update for opera fixes the following issues : - Update to version 73.0.3856.344 - CHR-8265 Update chromium on desktop-stable-87-3856 to 87.0.4280.141 - DNA-90625 Mac Crash at opera::TabView:: GetPaintDataopera::TabState const - DNA-90735 Crash at opera::BrowserSidebarModel::GetItemVisible...

Shijiazhuang Jiuwing Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-09696)

Shijiazhuang Nine Win Network Technology Co., Ltd. is referred to as Nine Win Interactive, with website construction, mobile Internet products, 720-degree panoramic display, VI visual design as the core business. Shijiazhuang Jiuwin Network Technology Co., Ltd. website building system SQL injecti...

Security update for opera (moderate)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2021:0138-1 Rating: moderate References: Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112 CVE-2021-21113...

CVE-2020-13540

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...

CVE-2020-13539

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of t...

CVE-2020-13540

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the...

CVE-2020-13539

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of t...