PT-2021-6244

Name of the Vulnerable Software and Affected Versions NETGEAR GS108Tv2 versions prior to 5.4.2.36 NETGEAR GS110TPP versions prior to 7.0.7.2 NETGEAR GS110TPv2 versions prior to 5.4.2.36 NETGEAR GS110TPv3 versions prior to 7.0.7.2 NETGEAR GS308T versions prior to 1.0.3.2 NETGEAR GS310TP versions...

Adobe Premiere Pro MOV File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Premiere Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

MartDevelopers iResturant 跨站脚本漏洞

MartDevelopers iResturant is an open source lightweight restaurant Erp from MartDevelopers Kenya, designed to integrate social restaurant operations into a single system. A cross-site scripting vulnerability exists in version 1.0 of MartDevelopers iRestaurant, which stems from a lack of filtering...

CVE-2021-40851

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

Authorization Bypass

haproxy is vulnerable to authorization bypass. Lack of validation of the HTTP Host header could potentially result in bypass of access controls due to a mishandling of the Host and authority. The fix for the original CVE is correctly included in OpenShift 4.9.11.The release of OpenShift 4.9.6...

PT-2021-22981

Name of the Vulnerable Software and Affected Versions TCMAN GIM affected versions not specified Description The issue concerns a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. This could allow a remote attacker to obtain information. Recommendations At th...

CVE-2021-40851: Improper Authentication

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

The vulnerability of the cgi-bin/upload_firmware.cgi component of the D–Link DIR-823G router’s microprogramming system allows a hacker to cause a service failure.

The vulnerability of the cgi-bin/uploadfirmware.cgi component of the D–Link DIR-823G router’s microprogramming system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-0889: Undefined Security Weakness

In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...

PT-2021-7473

Name of the Vulnerable Software and Affected Versions Moxa NPort W2150A/W2250A affected versions not specified Description The issue is related to a lack of data sanitization at the management level in the firmware of Moxa NPort W2150A/W2250A serial interface converters. This could allow a remote...

WordPress 插件 跨站脚本漏洞

duoFAQ - Responsive, Flat, Simple FAQ plugin is a WordPress open source application plugin. duoFAQ - Responsive, Flat, Simple FAQ plugin for WordPress suffers from a cross-site scripting vulnerability. The vulnerability stems from a lack of data validation filtering of user-supplied data and...

PT-2021-16346

Name of the Vulnerable Software and Affected Versions: Get Custom Field Values WordPress plugin versions prior to 4.0 Description: The issue allows users with a role as low as Contributor to access other posts metadata without validating the permissions. For example, contributors can access admin...

PT-2021-16287

Name of the Vulnerable Software and Affected Versions: Shiny Buttons WordPress plugin versions 1.1.0 and earlier Description: The issue concerns the lack of authorization and CSRF protection when saving a template, specifically through the wpbtn save template function hooked to the init action...

FreeBSD : Gitlab -- Multiple Vulnerabilities (b299417a-5725-11ec-a587-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b299417a-5725-11ec-a587-001b217b3468 advisory. - Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4...

PT-2021-20783

Name of the Vulnerable Software and Affected Versions: Bentley View version 10.15.0.75 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

Bentley View JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

Bentley View 3DS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of 3DS...

PT-2021-20740

Name of the Vulnerable Software and Affected Versions: Bentley View version 10.15.0.75 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw...

VulnCheck KEV: CVE-2021-44168

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files...

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...