17638 matches found
CVE-2021-44120
CVE-2021-44120 affects SPIP 4.0.0 with a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces.php by adding the function safehtml to vulnerable fields. An editor can modify personal information, and if an article exists, a visitor reading the author’s information on the public sit...
Dada Mail Cross-Site Request Forgery Vulnerability
Dada Mail is a web-based email list management system. A cross-site request forgery vulnerability exists in Dada Mail versions prior to 11.16.0. An attacker could send a crafted web page to obtain information about a user's account...
About the security content of Safari 15.3
About the security content of Safari 15.3 This document describes the security content of Safari 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2022-23027
CVE-2022-23027 affects BIG-IP when a FastL4 profile is paired with an HTTP, FIX, and/or hash persistence profile on the same virtual server. The root cause is an undisclosed request handling issue that can cause the virtual server to stop processing new client connections, leading to a DoS on the...
CVE-2022-23014
Summary (CVE-2022-23014): On BIG-IP APM portal access configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, potentially disrupting traffic (DoS). Affected versions: 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1. Remediation: upgrad...
CVE-2021-4145
CVE-2021-4145: QEMU block mirror NULL pointer dereference in mirror_wait_on_conflicts() where self may be NULL. This can crash the QEMU process on the host when mirroring data reaches the node threshold. Affected products/versions: QEMU up to, but not including, 6.2.0. Root cause: dereferencing a...
CVE-2021-45343
creationtimestamp| type| source ---|---|--- 2022-01-25 16:18:36+00:00| seen| https://t.me/cibsecurity/36206...
CVE-2022-0338
CVE-2022-0338 affects Conda’s loguru prior to 0.5.3, with the root cause described as Insertion of Sensitive Information into Log File. The vulnerability leads to potential information disclosure via log files. Affected component is loguru used within Conda; remediation is upgrading to loguru 0.5...
CVE-2022-0185
creationtimestamp| type| source ---|---|--- 2022-01-22 00:20:08+00:00| published-proof-of-concept| Telegram/cZHRCQIb7mVwEwPgUhRmgGXZDJpWRWiHGP56BhZb73fOTWD 2022-01-23 17:17:15+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1716 2022-01-24 07:36:35+00:00| published-proof-of-concept|...
CVE-2021-46340
Summary of the CVE-2021-46340 issue : The vulnerability affects JerryScript 3.0.0, arising from an assertion in /parser/js/js-scanner.c(scanner_scan_statement_end). The code path fails when context_p->stack_top_uint8 is not equal to SCAN_STACK_TRY_STATEMENT or SCAN_STACK_CATCH_STATEMENT, indic...
What COVID Reminded Me About Compliance
It was another late-December morning a few days after Christmas and the weather was unseasonably cold where I live in New Jersey, in the northeast of the US. My daughters were a few days into their winter break and already getting into the routine of “waking-up-late-cereal-watching Netflix”. In m...
CVE-2021-34600
CVE-2021-34600 affects Telenot CompasX prior to 32.0, due to a weak seed for random number generation that yields predictable AES keys in NFC tags used for local user authorization. This weakness can undermine trustworthiness of the installation. Affected component: NFC tag key generation within ...
CVE-2022-22733
Apache ShardingSphere ElasticJob-UI (3.x, v3.0.0 and earlier) is affected by CVE-2022-22733, which allows a guest account to escalate privileges due to exposure of sensitive information to an unauthorized actor. Technical details from connected sources confirm the vulnerable component is ElasticJ...
CVE-2021-44837
Delta RM 1.2 is affected by an authorization issue where an unprivileged user can access the same information as an administrator regarding risk creation via the endpoint /risque/administration/referentiel/json/create/categorie using the id_cat1 parameter. The root cause is insufficient access co...
CVE-2022-21273
CVE-2022-21273 affects Oracle E-Business Suite, Project Costing (component: Expenses, Currency Override). Affected versions: 12.2.3–12.2.11. Described as easily exploitable: a low-privilege attacker on the network with HTTP access can compromise Project Costing, leading to unauthorized creation, ...
