Red Hat OpenShift GitOps 授权问题漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. Red Hat OpenShift GitOps suffers from an authorization issue vulnerability that stems from argocd: ServiceAccount argocd-argocd-server...

PT-2021-6126

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.16.10 Description The issue is related to a buffer overflow in the Linux kernel, which can be exploited by a remote attacker to execute arbitrary code. Certain binary files built around 2003, for example with GC...

CVE-2021-24326

CVE-2021-24326 concerns the WordPress plugin “All 404 Redirect to Homepage” (pre-1.21). The issue is an authenticated reflected Cross-Site Scripting (XSS) vulnerability in the tab parameter of the Settings page, where user input is not properly sanitized before being output inside an HTML attribu...

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions o...

CVE-2021-24326: Improper Neutralization of Input During Web Page Generation

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting XSS issue as user input was not properly sanitised before being output in an attribute...

PT-2021-15863

Name of the Vulnerable Software and Affected Versions All 404 Redirect to Homepage WordPress plugin versions prior to 1.21 Description The issue concerns an authenticated reflected Cross-Site Scripting XSS problem. It occurs because user input for the tab parameter on the settings page is not...

CVE-2021-24287

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24287

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24287 Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

PT-2021-15826

Name of the Vulnerable Software and Affected Versions Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin versions prior to 1.3.2 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the settings page of the plugin did...

CVE-2021-24287: Improper Neutralization of Input During Web Page Generation

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

SQL Injection Vulnerability in web management interface of Aifei Flow Control Route.

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technology service, technology consulting, technology transfer, technology promotion and so on. SQL injection...

CVE-2021-31901

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

CVE-2021-31901

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

Design/Logic Flaw

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

CVE-2021-31901

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

CVE-2021-31901

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

WS-2021-0104

Prototype pollution vulnerability in assign-deep-all versions 1.0.2 through 1.1.8 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-31901: Undefined Security Weakness

In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group...

PT-2021-19576

Name of the Vulnerable Software and Affected Versions: JetBrains Hub versions prior to 2021.1.13079 Description: The issue concerns the improper enabling of two-factor authentication for the All Users group. Recommendations: For versions prior to 2021.1.13079, update to version 2021.1.13079 or...