6659 matches found
GSD-2021-1002760 media: mxl111sf: change mutex_init() location
media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
GSD-2021-1002709 media: mxl111sf: change mutex_init() location
media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
GSD-2021-1002658 media: mxl111sf: change mutex_init() location
media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...
Ericsson Network Location Command Injection (CVE-2021-43339)
A command injection vulnerability exists in Ericsson Network Location. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Adobe Prelude < 22.1.1 Multiple Vulnerabilities (APSB21-114)
The version of Adobe Prelude installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-114 advisory. - Adobe Prelude version 22.1.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure...
The vulnerability of the J-Web interface in Junos OS operating systems allows attackers to circumvent security restrictions.
The vulnerability of the J-Web interface in Junos OS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2021-101688)
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
Gumtree exposed users’ personal and GPS location via source code
By Waqas Gumtree.com or Gumtree is a London, England-based online classified advertisement website with millions of registered users. This is a post from HackRead.com Read the original post: Gumtree exposed users personal and GPS location via source code...
openSUSE 15 Security Update : MozillaFirefox (openSUSE-SU-2021:1575-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1575-1 advisory. - Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability...
The vulnerability of the SIMalliance Toolbox browser on Samsung devices allows a perpetrator to disclose protected information, extract location and IMEI information, or execute certain commands.
The vulnerability of the SIMalliance Toolbox browser on Samsung devices is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to disclose protected information, extract location and IMEI details, or execute certain commands using the SIM Toolkit S...
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client involves a cycle that can be executed with an unavailable exit condition, allowing an attacker to perform a denial-of-service attack.
The vulnerability of the Mozilla Firefox browser and the Mozilla Thunderbird email client relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure through an infinite loop error when using the Location...
wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users
A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
Samsung RRC MeasurementReport Exception Condition Handling Vulnerability
Samsung RRC MeasurementReport is a wireless resource control protocol measurement report for Samsung Samsung mobile devices. The Samsung RRC MeasurementReport suffers from an anomalous condition handling vulnerability that stems from the lack of proper RRC security variable checking in the Exynos...
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
Microsoft Internet Explorer / ActiveX Control - Security Bypass
Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-ACTIVEX-CONTROL-SECURITY-BYPASS.txt twitter.com/hyp3rlinx ISR:...