589 matches found
Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability
A vulnerability in the H.323 application level gateway ALG used by the Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass the ALG. This vulnerability is due to insufficient data validation of traffic that is traversing the AL...
ROS-2-581
2.581 Multiple Vulnerabilities in Moodle CVE-2021-32472 - CVE-2021-32478 1. Vulnerability Description: CVE-2021-32478 A vulnerability exists due to insufficient cleansing of user-provided data at the LTI authorization endpoint. A remote attacker could trick a victim into clicking a specially...
Invoice System 1.0 - 'Multiple' Stored Cross-Site Scripting (XSS)
Exploit Title: Invoice System 1.0 - 'Multiple' Stored Cross-Site Scripting XSS Date: 12 July 2021 Exploit Author: Subhadip Nag mrl0s3r Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/14858/invoice-system-using-phpoop-free-source-code.html Tested...
Zoo Management System 1.0 - 'Multiple' Persistent Cross-Site-Scripting (XSS)
Exploit Title: Zoo Management System 1.0 - 'Multiple' Stored Cross-Site-Scripting XSS Date: 08/07/2021 Exploit Author: Subhadip Nag Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/zoo-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Server: XAMPP...
The vulnerability of the centralized system for managing user identities in Freeipa arises from insufficient data processing within the security mechanisms. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the centralized system for managing user identities in Freeipa is related to insufficient data processing within the security mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to execute arbitrary code.
The vulnerability of the eBPF subsystem in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Peloton TTR01 数据伪造问题漏洞
The Peloton TTR01 is a wireless device. A data forgery vulnerability exists in the Peloton TTR01, which arises from insufficient validation of data authenticity and can be exploited by an attacker with physical access to boot into a modified kernel ramdisk without unlocking the bootloader.The...
Small CRM 3.0 - 'Authentication Bypass' SQL Injection
Exploit Title: Small CRM 3.0 - 'Authentication Bypass' SQL Injection Date: 12/06/2021 Exploit Author: BHAVESH KAUL Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/small-crm-php/ Version: 3.0 Tested on: Server: XAMPP Description Small CRM 3.0 is vulnerable to SQL...
openSUSE Security Update : Chromium (openSUSE-2021-629)
This update for chromium fixes the following issues : - Chromium was updated to 90.0.4430.93 boo1184764,boo1185047,boo1185398 - CVE-2021-21227: Insufficient data validation in V8. - CVE-2021-21232: Use after free in Dev Tools. - CVE-2021-21233: Heap buffer overflow in ANGLE. - CVE-2021-21228:...
CVE-2021-21227
Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Chromium: CVE-2021-21208 Insufficient data validation in QR scanner
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
The vulnerability of the Mutt email client, related to insufficient data protection, allows a hacker to execute a “man-in-the-middle” attack.
The vulnerability of the Mutt mail client is related to insufficient data protection. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...
PT-2021-2679 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows DNS service, which can be exploited by a remote attacker to gain unauthorized access to protected information...
TYPO3 cross-site scripting vulnerability (CNVD-2021-22140)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Typo3 Association. A cross-site scripting vulnerability exists in TYPO3 Core that stems from insufficient handling of user-supplied data in the Content Preview Renderer component. No detailed...
The vulnerability of the Google Chrome browser’s media component allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the Google Chrome browser’s media component is related to insufficient data validation. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...
openSUSE Security Update : chromium (openSUSE-2021-392)
This update for chromium fixes the following issues : Update to 89.0.4389.72 boo1182358, boo1182960 : - CVE-2021-21159: Heap buffer overflow in TabStrip. - CVE-2021-21160: Heap buffer overflow in WebAudio. - CVE-2021-21161: Heap buffer overflow in TabStrip. - CVE-2021-21162: Use after free in...
CVE-2021-21187
Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
