CVE-2021-33500

PuTTY before 0.75 on Windows allows remote servers to cause a denial of service Windows GUI hang by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs ...

CVE-2021-33500

PuTTY before 0.75 on Windows is vulnerable to a Denial of Service where a remote server repeatedly changes the window title at high speed, causing many SetWindowTextA/SetWindowTextW calls and a Windows GUI hang. The attack methodology may affect some OS-level GUIs on Linux or other platforms. CVE...

PuTTY 安全漏洞

PuTTY is a suite of free Telnet, Rlogin and SSH client software from the individual developer Simon Tatham. The software is primarily used for remote administration of Linux systems. A security vulnerability exists in PuTTY versions prior to 0.75, which stems from allowing a remote server to caus...

RHEL 8 : qt5-qtbase (RHSA-2021:1756)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1756 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

CentOS 8 : qt5-qtbase (CESA-2021:1756)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1756 advisory. - qt: buffer over-read in readxbmbody in gui/image/qxbmhandler.cpp CVE-2020-17507 Note that Nessus has not tested for this issue but has instead relied only on...

SAP GUI Input Validation Error Vulnerability

SAP GUI is a German SAP SAP company's application software. graphical user interface for the SAP system. An input validation error vulnerability exists in SAP GUI for Windows versions 7.60 and 7.70. The vulnerability stems from the program redirecting users to a specific malicious website, which...

CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim...

CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim...

Design/Logic Flaw

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim...

CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim...

CVE-2021-27612

SAP GUI for Windows (versions ≤ 7.60 PL9 and 7.70 PL0) is affected by an input validation error that, in certain conditions, forwards users to a specific malicious website. This could lead to malware infections or phishing attempts aimed at stealing credentials. The issue is documented as a redir...

CVE-2021-27612

In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim...

SAP GUI 输入验证错误漏洞

SAP GUI is a German SAP SAP company's application software. graphical user interface for the SAP system. An input validation error vulnerability exists in SAP GUI for Windows versions 7.60 and 7.70. The vulnerability stems from the program redirecting users to a specific malicious website, which...

VoIPMonitor未授权远程代码执行漏洞（CVE-2021-30461）

SSD Advisory – VoIPmonitor UnAuth RCE May 6, 2021 SSD Disclosure / Technical Lead Uncategorized TL;DR Find out how a vulnerability in VoIPmonitor allows an unauthenticated attacker to execute arbitrary code. Vulnerability Summary VoIPmonitor is “open source network packet sniffer with commercial...

CVE-2020-4987

CVE-2020-4987 affects IBM FlashSystem 900 user management GUI. Stored XSS in the web UI allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected code is VRMF 1.5.2.8 and prior and 1.6.1.2 and prior; fixes are available: 1.6.1.3 (1.6 s...

Security Bulletin: Multiple vulnerabilities affect the IBM Spectrum Scale GUI

Summary Vulnerabilities exist in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-29667 DESCRIPTION: IBM Spectrum Scale is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the syste...

Design/Logic Flaw

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

CVE-2021-28829

The CVE-2021-28829 issue affects TIBCO Administrator – Enterprise Edition and related distributions for Silver Fabric and z/Linux, specifically the Administration GUI component. The root cause is a CSV injection vulnerability that an attacker with network access can exploit to execute a persisten...

CVE-2021-28828 TIBCO Administrator SQL injection vulnerability

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

CVE-2021-28827

CVE-2021-28827 describes a stored cross-site scripting vulnerability in the Administration GUI components of TIBCO Administrator - Enterprise Edition (including Silver Fabric distributions) and TIBCO Runtime Agent (and z/Linux variants). The issue allows an unauthenticated attacker, via social en...