2423 matches found
GSD-2021-1000201 btrfs: fix deadlock when cloning inline extents and using qgroups
btrfs: fix deadlock when cloning inline extents and using qgroups This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...
UBUNTU-CVE-2021-29957
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...
CVE-2021-33496
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
Cross site scripting
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
CVE-2021-33496
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
Dutchcoders transfer.sh 跨站脚本漏洞
transfer.sh is a sh script for Dutchcoders to create shared files. Easily and quickly share files via the command line. This code contains everything needed for the server as well as creating your own instance. Dutchcoders transfer.sh 1.2.4 previously had a security vulnerability that stemmed fro...
PT-2021-20158 · Dutchcoders · Transfer.Sh
Name of the Vulnerable Software and Affected Versions: Dutchcoders transfer.sh versions prior to 1.2.4 Description: The issue allows cross-site scripting XSS via an inline view. This means an attacker could potentially inject malicious scripts into the website, affecting users who access the...
MGASA-2021-0217 Updated thunderbird packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection CVE-2021-29956. Partial protection of inline OpenPGP message not indicated CVE-2021-29957...
Updated thunderbird packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Thunderbird stored OpenPGP secret keys without master password protection CVE-2021-29956. Partial protection of inline OpenPGP message not indicated CVE-2021-29957...
PYSEC-2021-85
Plone through 5.2.4 allows XSS via the inlinediff methods in Products.CMFDiffTool...
Plone 跨站脚本漏洞
Plone is the industry's leading open source CMS system for content management, document management and knowledge management. A cross-site scripting vulnerability exists in Plone 5.2.4 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the inlinedi...
CVE-2021-29957
If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird 78.10.2...
Cross-Site Scripting (XSS)
Redmine is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via textile inline links...
PT-2024-11094 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock that occurs when cloning inline extents and using qgroups in the btrfs file system. This happens because when reserving metadata space for a...
CVE-2021-0270
On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...
Race condition
On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...
CVE-2021-0270
On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...
Description of the security update for Outlook 2016: April 13, 2021 (KB4504712)
None None...
Redmine Cross-Site Scripting Vulnerability (CNVD-2021-27366)
Redmine is an open source, web-based project management and defect tracking tool. A stored cross-site scripting vulnerability exists in Redmine. An attacker can exploit this vulnerability via textile inline links to conduct cross-site scripting attacks...
