13597 matches found
Ruby 输入验证错误漏洞
Ruby is a cross-platform, object-oriented, dynamically typed programming language from the personal developer Yukihiro Matsumoto. buffer overflow vulnerability exists in versions prior to Ruby 3.0.3, which stems from a buffer overflow string 700 MB to CGI.escapehtml when passing very large data. ...
PT-2021-5297
Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.7.5 Ruby versions 3.x prior to 3.0.3 CGI gem versions prior to 0.3.1 Description The issue is caused by an integer overflow and resultant buffer overflow in the CGI.escape html function when a long string is passed to ...
CVE-2021-20844
creationtimestamp| type| source ---|---|--- 2021-11-24 18:27:06+00:00| seen| https://t.me/cibsecurity/32951...
Security Advisory - Possible Out-Of-Bounds Read Vulnerability in Some Huawei Products
Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-bounds read vulnerability that could lead to a denial of service. Vulnerability ID: HWPSIRT-2020-00938 This vulnerability has been assigned a Common...
CVE-2021-2310
creationtimestamp| type| source ---|---|--- 2021-11-23 13:11:43+00:00| seen| https://t.me/thehackernews/1674 2021-11-23 16:26:09+00:00| seen| https://t.me/BlackHutEgy/855 2021-11-25 10:36:56+00:00| seen| https://t.me/BlueRedTeam/1224 2021-11-25 11:00:21+00:00| seen|...
CVE-2021-40770
creationtimestamp| type| source ---|---|--- 2021-11-22 18:23:59+00:00| seen| https://t.me/cibsecurity/32797...
CVE-2021-42727
creationtimestamp| type| source ---|---|--- 2021-11-22 18:23:49+00:00| seen| https://t.me/cibsecurity/32791...
User Impersonation
hadoop-ozone-common is vulnerable to user impersonation. The vulnerability exists due to an insecure validation of owner field of S3AUTHINFO type delegation token, allowing authenticated users with valid Ozone S3 credentials to create specific OM requests and impersonate other user...
Authorization Bypass
hadoop-hdds-common is vulnerable to authorization bypass. The library does not properly perform authorization checks, allowing an authenticated attacker to execute admin block operations...
Privilege Escalation
Apache Ozone Common is vulnerable to privilege escalation attacks. The vulnerability exists because the initially generated block tokens are stored in metadata database and can be retrieved with authenticated users with permission, allowing a malicious user to gain access to the key even after...
CVE-2021-41569
creationtimestamp| type| source ---|---|--- 2021-11-19 20:17:08+00:00| seen| https://t.me/cibsecurity/32718 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41569.yaml 2024-11-22 00:00:00+00:00| seen| The Shadowserver...
SUSE-SU-2021:3728-1 Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma
This update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma contains the following fixes: Security fixes included in this update: rubygem-redcarpet:...
CVE-2021-40130
A vulnerability in the web application of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to specify non-log files as sources for syslog reporting. This vulnerability is due to improper restriction of the syslog configuration. An attacker could exploit...