CVE-2021-32817

express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential vulnerability...

Regular Expression Denial of Service

Overview In websocket-extensions before version 0.1.4, there is a vulnerability which allows an attacker to exhaust the server's capacity to process incoming requests by sending a WebSocket handshake request containing a header of the following form: Sec-WebSocket-Extensions: a;...

Nextcloud: Ransomware protection is missing extentions

So again I'm not sure if this is in scope. However you do advertise this on your enterprise pages. So I assume so. In any case. It seems your ransomewareprotection app is missing some common extentions. See for example...

CVE-2021-28465

Web Media Extensions Remote Code Execution Vulnerability...

Remote code execution

Web Media Extensions Remote Code Execution Vulnerability...

CVE-2021-28465

Web Media Extensions Remote Code Execution Vulnerability...

CVE-2021-28465 Web Media Extensions Remote Code Execution Vulnerability

...

CVE-2021-28465 Web Media Extensions Remote Code Execution Vulnerability

...

CVE-2021-28465

CVE-2021-28465 affects Microsoft Windows Web Media Extensions (Web Media Extensions library). The vulnerability is a remote code execution in the Web Media Extensions component, with root cause described in public advisories as a buffer/codec-related issue enabling arbitrary code execution when p...

Microsoft Windows Web Media Extensions Library RCE (May 2021)

The Windows 'Web Media Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted...

Microsoft Windows Codecs 缓冲区错误漏洞

Microsoft Windows Codecs is an operating system from Microsoft. It provides a multitasking graphical user interface. A buffer error vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected:Web Media Extensions...

KLA12174 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

WordPress Rife Elementor Extensions&Templates Plugin Cross-Site Scripting Vulnerability

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Rife Elementor Extensions&Templates Plugin versions prior to 1.1.6. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

CVE-2021-1478

A vulnerability in the Java Management Extensions JMX component of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to cause a denial of service DoS condition on an...

Design/Logic Flaw

A vulnerability in the Java Management Extensions JMX component of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to cause a denial of service DoS condition on an...

CVE-2021-1478 Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the Java Management Extensions JMX component of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to cause a denial of service DoS condition on an...

Vulnerabilities fixed in Cisco Unified Communications Manager

Vulnerabilities have been fixed in Cisco Unified Communications Manager. An authenticated malicious party could potentially exploit the vulnerability with CVE attribute CVE-2021-1478 potentially exploit it to cause a Denial-of-Service attack. To do so, the Java Management Extensions JMX network...

Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition Denial of Service Vulnerabilities

Cisco Unified Communications Manager is the powerful call processing component of the Cisco Unified Communications solution. It is a scalable, distributable, and highly available enterprise Voice over IP call processing solution.Cisco Unified Communications Manager Session Management Edition is t...

KLA12184 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A data validation vulnerability in V8 can be exploited to bypass security...

CVE-2021-24265

The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method...