PT-2021-13697

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2021-12694

Name of the Vulnerable Software and Affected Versions: Younglimwon Co., Ltd ActiveX control affected versions not specified Description: The issue allows an attacker to cause arbitrary file download and execution due to a download of code without integrity check vulnerability in the ActiveX...

CVE-2021-40812

The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...

CVE-2021-40812

The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...

Vulnerability of the /controller/publishHotel.php component of the Hotels Server content management system, allowing a hacker to execute arbitrary code.

The vulnerability of the /controller/publishHotel.php component of the Hotels Server content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-19767

A lack of target address verification in the destroycontract function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script...

CVE-2021-37629

Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. It is recommended that the Nextcloud Richdocuments app is...

CVE-2020-19767: Undefined Security Weakness

A lack of target address verification in the destroycontract function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script...

PT-2021-21744

Name of the Vulnerable Software and Affected Versions Nextcloud Richdocuments versions prior to 3.8.4 Nextcloud Richdocuments versions prior to 4.2.1 Description Nextcloud Richdocuments is an open source collaborative office suite. In affected versions, there is a lack of rate limiting on the...

CVE-2020-19769: Insufficient Verification of Data Authenticity

A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...

Aruba Networks ArubaOS Path Traversal Vulnerability (CNVD-2021-70117)

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability is caused by a lack of validation and filtering of parameters, which could be exploited by an authenticated attacke...

WordPress 插件跨站脚本漏洞

WordPress is the WordPress Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress' Keyword Meta plugin version 3.0 and earlier is vulnerable to a cross-site scripting...

CVE-2021-40491

The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl...

Remote Code Execution (RCE)

tar is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization on the path of the entries when extracting tar files which allows an attacker to execute remote codes...

PT-2021-7487

Name of the Vulnerable Software and Affected Versions Cisco Nexus Insights affected versions not specified Description The issue is related to the web interface of Cisco Nexus Insights, where a vulnerability allows an authenticated, remote attacker to view and download files related to the web...

PT-2021-22885

Name of the Vulnerable Software and Affected Versions Compro IP70 version 2.08 7130218 Compro IP570 version 2.08 7130520 Compro IP60 affected versions not specified Compro TN540 affected versions not specified Description The issue concerns a lack of authorization requirement for the...

PT-2021-18520

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue is related to the lack of validation of return values from some methods or functions, which could expose information that could be used to create attacks. Recommendations For IBM Plannin...

Remote Code Execution (RCE)

total.js is vulnerable to remote code execution. Lack of sanitization of user-provided values allows an attacker to inject and execute malicious code via the function utils.set...

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...