hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2021-29515 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2021-29515 Source advisory: OSV:PYSEC-2021-152...

CVE-2020-21452: Unrestricted Upload of File with Dangerous Type

An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload...

Remote code execution vulnerability in WeChat windows version

WeChat for windows is a cross-platform communication tool. A remote code execution vulnerability exists in WeChat for windows, which can be exploited by attackers to execute malicious code...

CVE-2021-25922

In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting XSS due to user input not being validated properly. An attacker could trick a user to click on a malicious url and execute malicious code...

Secomea GateManager Cross-Site Request Forgery Vulnerability

GateManager is a VPN server from Secomea. A cross-site request forgery vulnerability exists in the web GUI of Secomea GateManager versions prior to 9.4. An attacker can exploit this vulnerability to execute malicious code...

CVE-2020-29030

Cross-Site Request Forgery CSRF vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4...

Wuhan Douyu Fish Music Network Technology Co., Ltd Douyu Live Companion suffers from dll hijacking vulnerability (CNVD-2021-21511)

Douyu Live Companion is a live streaming software specially developed for the anchors of Douyu. Wuhan Douyu Fish Music Network Technology Co. Douyu Live Companion has a dll hijacking vulnerability, which can be exploited by attackers to execute malicious code and obtain server privileges...

CVE-2020-29032: Download of Code Without Integrity Check

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022...

CVE-2020-29030: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4...

Arbitrary Code Execution

grub2 is vulnerable to arbitrary code execution. An attacker could bypass the Secure Boot mechanism via triggering a memory corruption which allows for malicious code execution...

Directory Traversal

salt is vulnerable to directory traversal. The salt.wheel.pillarroots.write method allows for directory traversal and can potentially lead to malicious code execution...

Remote Code Execution

gramaddict is vulnerable to remote code execution. The usage of UIAutomator2 and ATX-Agent allows an attacker to reach TCP port 7912, subsequently allowing to trigger malicious code execution, e.g., by being on the same Wi-Fi network...

OTRS AG Survey: Cross-site Scripting Vulnerabilities

OTRS AG Survey is a Perl-based customer survey appliance from OTRS Germany. The tool is intended for use in sending e-mails to customers after a ticket has been closed. A cross-site scripting vulnerability exists in OTRS AG Survey that can be exploited by an attacker to execute malicious code in...

PT-2021-14506

Name of the Vulnerable Software and Affected Versions OTRS AG Survey versions 6.0.20 and prior OTRS AG Survey versions 7.0.19 and prior Description The issue allows a survey administrator to craft a survey that can execute malicious code in the agent interface, affecting other agents who want to...

CentOS 8 : qt5-qtbase and qt5-qtwebsockets (CESA-2020:4690)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4690 advisory. - qt: XML entity expansion vulnerability CVE-2015-9541 - qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Lumia Gaming Accelerator has a dll hijacking vulnerability

LuMaster Gaming Accelerator is an official game gas pedal software from LuMaster. There is a dll hijacking vulnerability in LuMaster Gaming Accelerator. Attackers can use this vulnerability to execute malicious code...

LuMaster Game Inventory in dll Hijacking Vulnerability

LuMaster Game Library is a game application library software officially launched by LuMaster. LU Master Game Library is vulnerable to dll hijacking. An attacker can exploit this vulnerability to execute malicious code...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12703)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12701)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...