9238 matches found
CVE-2021-44050
CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...
CVE-2021-44050
CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...
Sql injection
CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...
CVE-2021-44050
CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...
CVE-2021-44050
CVE-2021-44050 concerns Broadcom CA Network Flow Analysis (NFA) version 21.2.1 and earlier. The connected sources specify a SQL injection vulnerability in the NFA web application caused by insufficient input validation, with an impact of potentially exposing sensitive data to an authenticated use...
CVE-2021-43791
Zulip is an open source group chat application that combines real-time chat with threaded conversations. In affected versions expiration dates on the confirmation objects associated with email invitations were not enforced properly in the new account registration flow. A confirmation link takes a...
Broadcom CA Network Flow Analysis SQL注入漏洞
Broadcom CA Network Flow Analysis is a network traffic monitoring solution from Broadcom Corporation USA. A SQL injection vulnerability exists in Broadcom CA Network Flow Analysis NFA version 21.2.1 and earlier, which could allow an authenticated attacker to access sensitive data...
CVE-2021-44050: Improper Neutralization of Special Elements used in an SQL Command
CA Network Flow Analysis NFA 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data...
PT-2021-24035
Name of the Vulnerable Software and Affected Versions: CA Network Flow Analysis NFA versions 21.2.1 and earlier Description: The issue is related to a SQL injection vulnerability in the NFA web application, caused by insufficient input validation. This could potentially allow an authenticated use...
GSD-2021-1002321 net/mlx5e: kTLS, Fix crash in RX resync flow
net/mlx5e: kTLS, Fix crash in RX resync flow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...
PT-2021-26791
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.15.4 Description: A potential issue exists in the net/mlx5e component related to kTLS, which may cause a crash in the RX resync flow. The actual impact and attack plausibility have not yet been proven...
WS-2021-0471
In Linux/Kernel is vulnerable tocrash in RX resync flow in drivers/net/ethernet/mellanox/mlx5/core/enaccel/ktlsrx.c...
undertow: potential security issue in flow control over HTTP/2 may lead to DOS
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability...
CVE-2021-38448
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38448
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38448
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
Design/Logic Flaw
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38448 Trane Symbio Improper Control of Generation of Code
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
CVE-2021-38448: Improper Control of Generation of Code
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...
PT-2021-22126
Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue arises from the affected controllers not properly sanitizing the input containing code syntax. This allows an attacker to craft code that can alter the intended controller flow of...