8873 matches found
Apple macOS 缓冲区错误漏洞
Apple macOS is a specialized operating system from Apple Inc. that was developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from a lack of proper validation of user-supplied data, which could result in reading more than the end of an allocated data...
CVE-2021-28246
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be...
PT-2021-17831 · Ca · Ca Ehealth Performance Manager
Name of the Vulnerable Software and Affected Versions: CA eHealth Performance Manager versions through 6.3.2.12 Description: The issue is related to Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user can create a malicious library in the writable RPATH, which will...
CVE-2021-20679
Fuji Xerox multifunction devices and printers DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort...
CVE-2021-20679
Fuji Xerox multifunction devices and printers DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort...
CVE-2021-20679
Fuji Xerox multifunction devices and printers DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort...
TYPO3 Access Control Bypass Vulnerability
TYPO3 is a free and open source content management system. An access control bypass vulnerability exists in TYPO3 Form Framework, which can be exploited by an attacker to bypass restrictions on submitting arbitrary data to the Form Designer back-end module...
The vulnerability of the “Commons Compress” compression tool’s reading method, related to the infinite loop that allows a hacker to cause a service failure.
The vulnerability of the “toolset for compressing Commons” reading method is related to an error during the return of the EOF indicator. Exploiting this vulnerability could allow an attacker to cause a service failure...
[SECURITY] Fedora 34 Update: gnome-user-docs-40~rc-1.fc34
This package contains end-user documentation for the GNOME desktop environment...
CVE-2021-21387
Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connectio...
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode DecodeElement or Skip method.
...
SQL Injection Vulnerability in SemCms Frontend
SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. SemCms front-end SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...
NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 10.2.X Releases
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 10.2.X Releases. The tables below explain the Citrix SD-WAN Software life cycle management milestones as well as important information regarding dates and options during this period. The dates and milestones...
NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 5100 WANOP Edition and 4100 WANOP Edition
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN formerly NetScaler 5100 WANOP and 4100 WANOP appliances. The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The...
NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 11.2.X and 11.3.X Releases
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 11.2.X and 11.3.X Releases. The tables below explain the Citrix SD-WAN software lifecycle management milestones as well as important information regarding dates and options during this period. Citrix SD-WAN...
Command Execution Vulnerability in MCMS
MCMS is a development template based on SpringBoot 2 architecture , front-end based on vue, element ui . MCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...
March 15, 2021—KB5001567 (OS Builds 19041.868 and 19042.868) Out-of-band
None None...
CVE-2021-28373
The authinternal plugin in Tiny Tiny RSS aka tt-rss before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in...
Logic flaw vulnerability in oasys
oasys is an OA office automation system , the use of Maven for project management , springboot framework based on the development of the project , mysql underlying database , the front-end freemarker template engine , Bootstrap as the front-end UI framework , integrated jpa, mybatis and other...