8546 matches found
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt that the attacker can use to capture credential data, and use...
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt that the attacker can use to capture credential data, and use...
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt that the attacker can use to capture credential data, and use...
Weak password vulnerability in Tianwen's service governance platform
Tianwen Digital Media Technology Beijing Co., Ltd. is a state-controlled national high-tech enterprise and Zhongguancun high-tech enterprise. A weak password vulnerability exists in Tianwen's service governance platform, which can be exploited by attackers to obtain sensitive information...
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt that the attacker can use to capture credential data, and use...
CVE-2021-32736: Improperly Controlled Modification of Object Prototype Attributes
think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes...
Command injection
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address...
ALPINE-CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address...
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address...
U.S. Dept Of Defense: CUI labled and ████ and ██████ Restricted ██████ intelligence
Description: A file labeled with the following "Data is for intelligence purposes only and is not to be used for targeting. This data is classified as CUI. Controlled by: ██████████ ███████ " References...
U.S. Dept Of Defense: CUI labled and ████ Restricted pdf on █████
Description: A file labeled with the following "CONTROLLED BY: ██████████ CUI ████: ███ ████████ Was discovered and based on public information ███████ CUI marking it appears it shouldn't be publicly available either. If i am wrong about the markings please correct me. References...
The vulnerability of the Zabbix universal monitoring system, related to bypassing authentication by using a user-controlled key, allows a intruder to circumvent the login page and gain access to the dashboard page.
The vulnerability of the Zabbix universal monitoring system relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to bypass the login page, gain access to the dashboard, and then create a monitoring panel, report, screen,...
CVE-2021-0547
In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permission check. This could lead to local escalation of privilege that may result in undefined behavior in some HAL implementations with no additional...
Out-of-bounds
In iaxxxcalci2sdiv of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-33515
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address...
PT-2021-3383 · Dovecot +4 · Dovecot +4
Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.15 Description: The issue allows for ../ Path Traversal, enabling an attacker with local filesystem access to trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location...
Type confusion
The npm package "striptags" is an implementation of PHP's striptags in Typescript. In striptags before version 3.2.0, a type-confusion vulnerability can cause striptags to concatenate unsanitized strings when an array-like object is passed in as the html parameter. This can be abused by an attack...
Cross-Site Request Forgery in Jenkins Credentials Plugin
Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting XSS vulnerability. Jenkins Credentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1,...
Directory traversal
LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter...