The vulnerability of the manager for Cockpit servers, related to errors in displaying the user interface or frames, allows a perpetrator to inject malicious code.

The vulnerability of the Cockpit server administrator relates to errors in displaying the user interface or frames. Exploiting this vulnerability allows a malicious actor to inject malicious code remotely...

The vulnerability of the wswprintf function in the AEAgent.cpp file of the ManageEngine AssetExplorer software, which allows a attacker to trigger a buffer overflow.

The vulnerability of the wswprintf function in the AEAgent.cpp file of the ManageEngine AssetExplorer software for managing IT assets is related to errors during certificate verification. Exploiting this vulnerability could allow a malicious actor to trigger a heap overflow...

Adobe Reader DC Continuous Security Updates (APSB21-51) - Windows

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC Continuous Security Update (APSB21-51) - Windows

The host is missing an important security update according to Adobe August update. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

Microsoft Windows Defender Multiple RCE Vulnerabilities (Jul 2021)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-07-2021. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

PT-2021-3919 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in displaying information to the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows...

The vulnerability of the Edge Installer component of the Microsoft Edge browser allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the Microsoft Edge browser’s Edge Installer component is related to errors during the connection to directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the Elastic Cloud Enterprise analytics platform, related to security configuration errors, allows a perpetrator to gain access to protected information.

The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to errors in authentication procedures, allows a perpetrator to gain access to protected information.

The vulnerability of the Red Hat OpenShift Container Platform is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to protected information remotely...

The vulnerability of Kubernets Rancher cluster management software lies in errors during the processing of input data, which allows attackers to escalate their privileges.

The vulnerability of Kubernets Rancher cluster management software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ZTE ZXHN H2640 后置链接漏洞

The ZTE ZXHN H2640 is a home gateway device from ZTE Corporation China.An information disclosure vulnerability exists in the ZTE ZXHN H2640, which stems from a configuration and other errors in the network system or product during operation. An unauthorized attacker could exploit the vulnerabilit...

The vulnerability in the Storm Control profile of Juniper Networks’ Junos OS routers of the QFX5000 and EX4600 series allows a attacker to cause a service failure.

The vulnerability of the Storm Control profile in Juniper Networks’ Junos OS routers of the QFX5000 and EX4600 series is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Mozilla Firefox browser, related to information representation errors, allows attackers to perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser is related to errors in the object model representation of documents. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Code injection

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

The vulnerability of the Moodle administration system, related to errors in processing hypertext links, allows a hacker to bypass security measures.

The vulnerability of the Moodle administration system is related to errors in processing hypertext links. Exploiting this vulnerability could allow a malicious actor to bypass security features remotely...

The vulnerability of the ARP Policer implementation on Juniper Networks’ Junos OS allows a perpetrator to circumvent traffic restrictions.

The vulnerability of the ARP Policer traffic filtering technology implemented in Juniper Networks’ Junos OS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to circumvent traffic restrictions...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series allows a hacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Foxit PDF Reader < 11.0.1 Multiple Vulnerabilities (macOS)

The version of Foxit PDF Reader for Mac installed on the remote macOS host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities: - Multiple remote code execution vulnerabilities exist in Foxit PDF Reader due to use-after-free errors when handling certain Javascripts. An...