PT-2021-21959

Name of the Vulnerable Software and Affected Versions: Corero SecureWatch Managed Services version 9.7.2.0020 Description: The issue arises from incorrect privilege checking for swa-monitor and cns-monitor users, allowing them to perform actions outside their designated roles. Recommendations: Fo...

jenkins: Improper handling of REST API XML deserialization errors

A flaw was found in jenkins. An attacker with permission to create or configure various objects to inject crafted content into Old Data Monitor can cause the instantiation of potentially unsafe objects once discarded by an administrator. The highest threat from this vulnerability is to data...

CVE-2021-36563: Improper Neutralization of Input During Web Page Generation

The CheckMK management web console versions 1.5.0 to 2.0.0 does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other client-side scripts, the XSS...

Launched App Stuck In 1 Monitor When 4 Or More Monitors Are Used

When Published Apps are launched through Workspace App and the Endpoint Device is using 4 monitors or more, they always open in the main screen monitor, and once the Published App is moved to another monitor and is maximized, the Published App goes to the original monitor where it started. Whethe...

Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in the following Oracle MySQL products: MySQL Connectors MySQL Server MySQL Enterprise Monitor The vulnerabilities allow an unauthenticated malicious person with network access to the vulnerable system may be able to launch attacks execute attacks that result in t...

CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

Design/Logic Flaw

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-36755

CVE-2021-36755 affects Nightscout Web Monitor (cgm-remote-monitor) 14.2.2. The issue is an XSS via a crafted X-Forwarded-For header. CVSS data shows network access, low attack complexity, no privileges required, with user interaction required, and partial integrity impact (I:L) and low confidenti...

Nightscout Web Monitor 跨站脚本漏洞

Nightscout Web Monitor is an open source web monitor for healthcare that allows multiple caregivers to remotely view a patient's blood glucose data in real time. A security vulnerability exists in Nightscout Web Monitor a.k.a. cgm-remote-monitor 14.2.2 that allows XSS via a crafted x - forward -...

PT-2021-21339

Name of the Vulnerable Software and Affected Versions Nightscout Web Monitor aka cgm-remote-monitor version 14.2.2 Description The issue allows for XSS via a crafted X-Forwarded-For header. This means an attacker could potentially inject malicious scripts into the website, affecting users who...

CVE-2021-36755: Improper Neutralization of Input During Web Page Generation

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-0590

In sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a privileged app to receive WiFi BSSID and SSID without location permissions due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (important)

openSUSE Security Update: Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly Announcement ID: openSUSE-SU-2021:1819-1 Rating: important References: 1181255 SLE-13843 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-318...

WordPress Plainview Activity Monitor 20161228 Remote Code Execution

Exploit Title: WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution RCE Authenticated 2 Date: 07.07.2021 Exploit Author: Beren Kuday GORUN Vendor Homepage: https://wordpress.org/plugins/plainview-activity-monitor/ Software Link:...

WordPress Plainview Activity Monitor 20161228 Plugin - Remote Code Execution (Authenticated) Exploit

Exploit Title: WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution RCE Authenticated 2 Exploit Author: Beren Kuday GORUN Vendor Homepage: https://wordpress.org/plugins/plainview-activity-monitor/ Software Link:...