9899 matches found
CVE-2021-20146
An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services...
CVE-2021-20146
An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services...
PT-2021-13803
Name of the Vulnerable Software and Affected Versions: Gryphon devices affected versions not specified Description: An unprotected ssh private key exists on the Gryphon devices, which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. The ss...
The secure development lifecycle
Whatever tolerance we had for failure has been turned upside down in the cloud. The consequences have never been greater. So, whats the solution? As made clear in Coalfires latest Cloud Advisory Board CAB Securealities report, smartest path to DevSecOps transformation, nothing is more important t...
USN-5178-1: Django vulnerability
Sjoerd Job Postmus and TengMA discovered that Django incorrectly handled URLs with trailing newlines. A remote attacker could possibly use this issue to bypass certain access controls...
FortiClientEMS - Sensitive information leak
A missing encryption of sensitive data vulnerability CWE-311 in FortiClientEMS may allow an authenticated attacker to view sensitive information in clear text via any browser development tools...
SUSE: Security Advisory (SUSE-SU-2021:3939-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
CVE-2021-42008 CVE-2021-42008: Exploiting A 16-Year-Ol...
JetBrains YouTrack Injection Vulnerability
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack is vulnerable to an injection vulnerability that stems from...
SUSE: Security Advisory (SUSE-SU-2021:3830-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Discourse < 2.7.11 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Dell EMC Streaming Data Platform code issue vulnerability
A code issue vulnerability exists in Dell EMC Streaming Data Platform, a Dell platform for real-time ingestion, storage, and analysis of continuous streaming data, which is caused by a design or implementation error in the code development process of a network system or product. improper design o...
RLSA-2021:4903 Critical: nss security update
Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Security Fixes: nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS CVE-2021-43527 For more details about the...
Open Design Alliance Drawings SDK Post-release Reuse Vulnerability (CNVD-2022-00615)
The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...
Youtube - Php-Mirroring Cross-Site Scripting Vulnerability
Youtube-Php-Mirroring is a Chinese Php development based on Youtube video proxy scripts. ytube-php-mirroring is vulnerable to a cross-site scripting vulnerability that originates in the file ytproxy/index.php. site scripting XSS vulnerability in the file ytproxy/index.php. No detailed vulnerabili...
Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01426)
Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...
Yanluowang Ransomware Tied to Thieflock Threat Actor
A threat actor previously tied to the Thieflock ransomware operation may now be using the emerging Yanluowang ransomware in a series of attacks against U.S. corporations, researchers have found. Researchers from Symantec, a division of Broadcom Software, found ties between Thieflock and Yanluowan...
Dell EMC Streaming Data Platform code-related vulnerabilities
A code issue vulnerability exists in Dell EMC Streaming Data Platform, a Dell platform for real-time ingestion, storage, and analysis of continuous streaming data, which is caused by a design or implementation error in the code development process of a network system or product. improper design o...
