5595 matches found
BELL-CVE-2021-43809 CVE-2021-43809 does not affect BellSoft software
Bulletin has no description...
PT-2021-9161 · Insulet · Insulet Omnipod Insulin Management System
Name of the Vulnerable Software and Affected Versions: Insulet Omnipod Insulin Management System versions with product ID 19191 and 40160 Description: The wireless RF communication protocol used by the Insulet Omnipod Insulin Management System does not properly implement authentication or...
The vulnerability of the KrugCorrectTime.exe software of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function, allowing a intruder to cause a malfunction in the normal operation of the SCADA system.
The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an intruder to cause malfunctions in the normal operation of the SCADA system...
CVE-2021-24642
The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE via a file upload as well as XSS...
PT-2021-16193 · WordPress · The Weather Effect
Name of the Vulnerable Software and Affected Versions: The Weather Effect WordPress plugin versions prior to 1.3.4 Description: The issue is related to the lack of CSRF checks and input validation when saving settings, which could lead to a Stored Cross-Site Scripting issue. This means that an...
GHSA-VJMG-PC8H-P6P8 Out of bounds read in fltk
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...
CVE-2021-24500
Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an attacker to trick a logged in user to submit a POST request to the vulnerable site, potentially...
Lenovo BIOS 安全漏洞
Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. A security vulnerability exists in the Lenovo BIOS that stems from a lack of authentication measures in the system, which could allow an attacker to elevate...
CVE-2021-24356
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activateplugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites...
BELL-CVE-2021-22543 CVE-2021-22543 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2021-29478 CVE-2021-29478 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2021-26291 CVE-2021-26291 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2021-2161 CVE-2021-2161 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2021-2163 CVE-2021-2163 does not affect BellSoft software
Bulletin has no description...
GHSA-2FW4-MGQ9-39CX Code Injection in oauth2-server
"oauth2-server aka node-oauth2-server through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CVE-2020-7692. NOTE: the vendor states 'As RFC7636 is an extension, I think the claim in the Readme of "RFC 6749 compliant" is valid and not...
BELL-CVE-2021-30178 CVE-2021-30178 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2021-26708 CVE-2021-26708 does not affect BellSoft software
Bulletin has no description...
CVE-2020-36173
The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields...