17643 matches found
CVE-2021-41329
CVE-2021-41329 affects Datalust Seq prior to 2021.2.6259. The issue is an information exposure caused by an internal cache key collision: when a user has a view filter with an array/IN clause and another user runs an identical query with different array elements, the results may be visible to the...
CVE-2021-20034
creationtimestamp| type| source ---|---|--- 2021-09-24 17:46:16+00:00| seen| https://t.me/truesecator/2144 2021-09-24 21:30:42+00:00| published-proof-of-concept| https://t.me/cKure/7266 2021-09-24 22:36:51+00:00| seen| https://t.me/ctinow/40360 2021-09-27 04:00:00+00:00| seen|...
GHSA-FPV6-F8JW-RC3R Elvish vulnerable to remote code execution via the web UI backend
Impact Elvish's backend for the experimental web UI started by elvish -web hosts an endpoint that allows executing the code sent from the web UI. The backend does not check the origin of requests correctly. As a result, if the user has the web UI backend open and visits a compromised or malicious...
Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console
Summary httpd is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0736 DESCRIPTION: Apache HTTPD could allow a remote attacker to obtain sensitive information, caused by an error in modsessioncrypto. By sending specially...
Filerun 2021.03.26 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: Filerun 2021.03.26 - Remote Code Execution RCE Authenticated Date: 09/21/2021 Exploit Author: syntegris information solutions GmbH Credits: Christian P. Vendor Homepage: https://filerun.com Software Link:...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22025. Reason: This candidate is a duplicate of CVE-2020-22025. Notes: All CVE users should reference CVE-2020-22025 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2021-39551
CVE-2021-39551 concerns SELA, a lossless audio codec. The vulnerability is a heap-based buffer overflow in the function file::SelaFile::readFromFile() implemented in sela_file.c, affecting SELA 20200412 and earlier versions. The available documents describe the issue as a heap overflow but do not...
CVE-2021-39528
CVE-2021-39528 is a confirmed vulnerability in the LibreDWG library. The issue is a double-free in dwg_free_MATERIAL_private() within dwg.spec, affecting libredwg up to version 0.10.1.3751. Documented risk metrics indicate a high impact with network attack vector and both confidentiality/ integri...
CVE-2020-20897
CVE-2020-20897 is a duplicate of CVE-2020-22035; refer to CVE-2020-22035 for details. The connected documents describe a heap-based Buffer Overflow in FFmpeg 4.2, specifically in get_block_row() implemented in libavfilter/vf_bm3d.c, which can lead to memory corruption and potential impact. Affect...
CVE-2020-20895
CVE-2020-20895 is rejected/not used per the description; reference CVE-2020-22028 instead.
CVE-2020-20893
CVE-2020-20893 is a duplicate of CVE-2020-22030 and references FFmpeg 4.2, specifically a heap-based buffer overflow in libavfilter/af_afade.c (crossfade_samples_fltp) that can lead to memory corruption. The connected documents describe the effect as memory corruption potentially enabling DoS or ...
Denial Of Service (DoS)
RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...
Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated) Exploit
Exploit Title: Library Management System 1.0 - Blind Time-Based SQL Injection Unauthenticated Exploit Author: Bobby Cooke @0xBoku & Adeeb Shah @hyd3sec Vendor Homepage: https://www.sourcecodester.com/php/12469/library-management-system-using-php-mysql.html Software Link:...
CVE-2021-40964
creationtimestamp| type| source ---|---|--- 2021-09-15 22:22:19+00:00| seen| https://t.me/cibsecurity/28945 2025-06-20 05:32:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41172 2025-06-20 09:00:05+00:00| published-proof-of-concept|...
CVE-2021-40639
Summary: CVE-2021-40639 affects Jfinal CMS 5.1.0 due to improper access control that can let unauthenticated attackers access sensitive files, specifically /classes/conf/db.properties and config=filemanager.config.js. What is affected: Jfinal CMS 5.1.0; vulnerability scope described as improper a...
CVE-2020-19159
creationtimestamp| type| source ---|---|--- 2021-09-15 18:22:37+00:00| seen| https://t.me/cibsecurity/28911...
CVE-2021-22147
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view...
CVE-2021-38647
creationtimestamp| type| source ---|---|--- 2021-09-15 05:46:05+00:00| published-proof-of-concept| https://t.me/cKure/7088 2021-09-15 16:22:15+00:00| seen| https://t.me/cibsecurity/28876 2021-09-15 21:47:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/537 2021-09-16 05:00:00+00:0...