8882 matches found
Vulnerability of operating systems macOS, watchOS, iOS, and iPadOS, caused by overflow in dynamic memory buffers, allowing attackers to execute arbitrary code.
The vulnerabilities of operating systems macOS, watchOS, iOS, and iPadOS are caused by an overflow in the dynamic memory buffer. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...
SUSE: Security Advisory (SUSE-SU-2021:3348-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:3348-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...
SUSE-SU-2021:3348-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa on a path bsc1188063. - logind: terminate cleanly on SIGTERM/SIGINT bsc1188018. - Adopting BFQ to control I/O jscSLE-21032, bsc1134353. - Rules weren't applied to dm devices multipath bsc1188713. - Ignore...
CVE-2021-41878
A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...
CVE-2021-41878
A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...
CVE-2021-41878
A reflected cross-site scripting XSS vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button...
CVE-2021-41878
CVE-2021-41878 affects i-Panel Administration System 2.0. A reflected cross-site scripting (XSS) flaw allows remote attackers to execute arbitrary JavaScript in the browser-based web console. PoCs show crafted URLs (e.g., /lostpassword.php/ā¦) injecting script; multiple public writeups and exploit...
i-Panel Administration System č·Øē«čę¬ę¼ę“
The i-Panel Administration System is a management system. A cross-site scripting vulnerability exists in i-Panel Administration System version 2.0, which can be exploited by a remote attacker to execute arbitrary JavaScript code in a browser-based web console...
@deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7), @ibuk/epubjs-rn (>=0.2.40, <=0.2.43) +49 more potentially affected by CVE-2021-3820 via i (>=0.2.0, <=0.3.6)
i NPM version =0.2.0, =0.1.2-beta.1, =0.2.40, =0.2.38, =0.3.25, =0.2.33, =4.0.0-beta.6, =0.2.5, =0.6.0, =0.1.5, =0.0.2, =0.2.37, =0.0.1, =0.0.3 and more Source cves: CVE-2021-3820 Source advisory: OSV:GHSA-X55W-VJJP-222R...
Security Bulletin: Integrated application server and integrated web services for IBM i are affected by CVE-2021-35517 and CVE-2021-36090
Summary There are multiple vulnerabilities in the Apache Commons Compress library as described in the vulnerability details section. The Apache Commons Compress library is used by WebSphere Application Server Liberty on IBM i. WebSphere Application Server Liberty is the runtime that is used by...
Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect IBM i
Summary Apache HTTP Server on IBM i is vulnerabile to the issues described in the vulnerability details section. IBM i has addressed the vulnerabilities in the Apache HTTP Server implementation as described in the remediation/fixes section. Vulnerability Details CVEID: CVE-2021-31618 DESCRIPTION:...
Security Bulletin: OpenSSL for IBM i is affected by CVE-2021-3711 and CVE-2021-3712
Summary OpenSSL is provided as an API available to application developers on IBM i. The OpenSSL APIs on IBM i are vulnerable to the issues described in the vulnerability details section. The applicability of each vulnerability is determined by an application's specific use of OpenSSL. IBM i has...
Hikvision IP Camera Unauthenticated Command Injection
This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...
Security Bulletin: ISC DHCP for IBM i is affected by CVE-2021-25217
Summary ISC DHCP on IBM i is vulnerable to the issue described in the vulnerability details section. IBM i has addressed the vulnerability in the ISC DHCP implementation. Vulnerability Details CVEID: CVE-2021-25217 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by a buffer...
CVE-2020-19159
Cross Site Request Forgery CSRF in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'...
PT-2021-8177 Ā· LinuxĀ +3 Ā· Linux KernelĀ +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk component of the Linux kernel, where unbinding a CCU driver unmaps the device's MMIO region but leaves its clocks/resets and their providers registered...
hw: vt-d related privilege escalation
A flaw was found in IntelĀ® VT-d products. Entries from the context cache on some types of context cache invalidations may not be properly invalidated which may allow an authenticated user to potentially enable escalation of privilege via local access. The highest threat from this vulnerability is...
Memory corruption
In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE before p10, and 11.4-RELEASE before p13, certain VirtIO-based device models in bhyve failed to handle errors when fetching I/O descriptors. A malicious...
FreeBSD : FreeBSD -- Missing error handling in bhyve(8) device models (a6d5d4c1-0564-11ec-b69d-4062311215d5)
Certain VirtIO-based device models failed to handle errors when fetching I/O descriptors. Such errors could be triggered by a malicious guest. As a result, the device model code could be tricked into operating on uninitialized I/O vectors, leading to memory corruption. Impact : A malicious guest...