CVE-2021-43779

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...

Remote code execution

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...

CVE-2021-43779 Remote Command Execution vulnerability

GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of...

PT-2022-12423 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Null Pointer Dereference issue exists in MP4Box via strlen avx2, causing a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the strlen avx2 function as a temporary workaround unt...

CVE-2021-39143 Path Traversal in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for deployments. This uses a utility to extract files locally for deployment without validating the paths in that deployment don't override system...

PT-2025-8437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the scsi: lpfc component. The issue occurs when an external loopback plug is inserted and then removed, followed ...

PT-2025-8599 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version containing commit ffa0b64e3be5 Description: A bug in the Linux kernel has been resolved, related to memory hotplug. The issue arises when the kernel validates an address against the high memory value...

PT-2025-8399

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the blk-throttle component. This issue occurs when a bio block I/O request is throttled and the BIO...

PT-2025-8655

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A memory corruption issue in the VF driver of the Linux kernel has been resolved. The issue occurred when the VF driver assumed that the VF was disabled while it still had queues...

PT-2025-8462

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the null pointer dereference issue in the drm/amdgpu/pm module. Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the...

PT-2025-8476

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc3-wt-ath+ 579 Description A warning message is generated in the Linux kernel when testing device recovery with specific commands, due to a mismatch in the mhi deassert dev wake and mhi assert dev wake...

PT-2021-6086 · Openexr +2 · Openexr +2

Name of the Vulnerable Software and Affected Versions: OpenEXR versions 3.1.0 through 3.1.3 Description: The issue is related to a heap-based buffer overflow in the Imf 3 1::LineCompositeTask::execute function, which can be called from IlmThread 3 1::NullThreadPoolProvider::addTask and IlmThread ...

PT-2021-24333 · Unknown · Open Asset Import Library

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library aka assimp versions 5.1.0 through 5.1.1 Description: The issue is a heap-based buffer overflow in the m3d safestr function, which is called from m3d load and Assimp::M3DWrapper::M3DWrapper. Recommendations: For...

PT-2021-23448 · Wireshark +2 · Wireshark +2

Name of the Vulnerable Software and Affected Versions: Wireshark version 3.6.0 Description: The issue is related to a large loop in the Kafka dissector, which allows for denial of service via packet injection or crafted capture file. Recommendations: For Wireshark version 3.6.0, consider disablin...

CVE-2021-43855

Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through a SVG file upload made via a custom request with a fake MIME type. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This...

PT-2021-6850 · Openwrt · Openwrt

Name of the Vulnerable Software and Affected Versions: OpenWrt version 21.02.1 Description: The issue exists due to a lack of protection for the web page structure in the OpenWrt embedded operating system. This can be exploited by a remote attacker to impact the confidentiality and integrity of...

Minio MinIO 安全漏洞

Minio MinIO is an open source object storage server from MinIO USA. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has a security vulnerability that stems from the fact that MinIO is a native application for Kubernetes cloud...

Vulnerability found in Moxa MGate

A vulnerability has been found in Moxa MGate. The vulnerability allows an unauthenticated remote malicious person to obtain obtain sensitive data. The vulnerable Moxa MGate series have vulnerable firmware that makes it possible for an attacker to intercept the traffic and then decrypt the login...

PT-2021-14827 · Unknown · Ic Module Cma

Name of the Vulnerable Software and Affected Versions: iC Module CMA version 5.0 Description: A stack-based buffer overflow issue exists in the CMA check udp crc function. This can be triggered by a specially-crafted packet, leading to a buffer overflow during a call to memcpy. An attacker can...

PT-2022-11995 · Spip +2 · Spip +2

Name of the Vulnerable Software and Affected Versions: SPIP version 4.0.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the ecrire/public/interfaces.php file, specifically affecting the "Who are you" and "Website Name" fields. An editor can modify their personal...