6646 matches found
USN-5173-1: libmodbus vulnerabilities
It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
USN-5173-1 libmodbus vulnerabilities
It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...
CVE-2021-3983
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3985
kimai2 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
The vulnerability of the CMA module in the FusionCompute virtualization software allows a hacker to execute arbitrary commands.
The vulnerability of the CMA module in FusionCompute virtualization software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
USN-5154-1 freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a crash. CVE-2021-41159 It was discovered that FreeRDP incorrectly handled certain connections. An attacker could possibly use this issue to execute...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
USN-5151-1 mailman vulnerabilities
It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. CVE-2021-43331 It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information...
USN-5148-2 hivex vulnerability
USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain...
USN-5148-1: hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
USN-5148-1 hivex vulnerability
It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerability to cause a crash or obtain sensitive information...
PT-2021-23822 · Unknown · Meddata Hbys
Name of the Vulnerable Software and Affected Versions: MedData HBYS versions prior to 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
PT-2021-23823 · Meddata · Meddata Hbys
Name of the Vulnerable Software and Affected Versions: MedData HBYS versions prior to 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
UBUNTU-CVE-2021-42377
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...
PYSEC-2021-430
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
IBM Tivoli Key Lifecycle Manager 输入验证错误漏洞
IBM Tivoli Key Lifecycle Manager TKLM is a set of key lifecycle management software from IBM Corporation. The software provides key storage, key maintenance, and key lifecycle management for storage devices.A security vulnerability exists in IBM Tivoli Key Lifecycle Manager, which stems from the...
uclibc-ng 跨站脚本漏洞
uclibc-ng is an application. A small C library for Linux. A security vulnerability in uClibc and uClibc-ng prior to 1.0.39 stems from improper handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo, resulting in the...
GHSA-P6RW-44Q7-3FW4 Stored XSS in Jupyter nbdime
Impact Improper handling of user controlled input caused a stored cross-site scripting XSS vulnerability. All previous versions of nbdime are affected. Patches Security patches will be released for each of the major versions of the nbdime packages since version 1.x of the nbdime python package...
Cross site scripting
This affects the package tempura before 0.4.0. If the input to the esc function is of type object i.e an array it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability...
