CVE-2021-36755

Nightscout Web Monitor aka cgm-remote-monitor 14.2.2 allows XSS via a crafted X-Forwarded-For header...

CVE-2021-36755

CVE-2021-36755 affects Nightscout Web Monitor (cgm-remote-monitor) 14.2.2. The issue is an XSS via a crafted X-Forwarded-For header. CVSS data shows network access, low attack complexity, no privileges required, with user interaction required, and partial integrity impact (I:L) and low confidenti...

Nightscout Web Monitor 跨站脚本漏洞

Nightscout Web Monitor is an open source web monitor for healthcare that allows multiple caregivers to remotely view a patient's blood glucose data in real time. A security vulnerability exists in Nightscout Web Monitor a.k.a. cgm-remote-monitor 14.2.2 that allows XSS via a crafted x - forward -...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

CVE-2021-33670

SAP NetWeaver AS for Java Http Service Monitoring Filter, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send multiple HTTP requests with different method types thereby crashing the filter and making the HTTP server unavailable to other legitimate users leading to deni...

Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (important)

openSUSE Security Update: Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly Announcement ID: openSUSE-SU-2021:1819-1 Rating: important References: 1181255 SLE-13843 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-318...

WordPress Plainview Activity Monitor 20161228 Plugin - Remote Code Execution (Authenticated) Exploit

Exploit Title: WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution RCE Authenticated 2 Exploit Author: Beren Kuday GORUN Vendor Homepage: https://wordpress.org/plugins/plainview-activity-monitor/ Software Link:...

WordPress Plainview Activity Monitor 20161228 Remote Code Execution

Exploit Title: WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution RCE Authenticated 2 Date: 07.07.2021 Exploit Author: Beren Kuday GORUN Vendor Homepage: https://wordpress.org/plugins/plainview-activity-monitor/ Software Link:...

WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)

Exploit Title: WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution RCE Authenticated 2 Date: 07.07.2021 Exploit Author: Beren Kuday GORUN Vendor Homepage: https://wordpress.org/plugins/plainview-activity-monitor/ Software Link:...

Vulnerability fixed in PRTG Network Monitor

A vulnerability has been fixed in PRTG Network Monitor. A malicious party can exploit the vulnerability to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser with which the application is visited. Paessler has released updat...

PRTG Network Monitor < 21.3.69.1333 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

ACRN Code Issues Vulnerabilities

ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...

Compliance When Migrating to the Cloud: SQL Server Running on Azure vs. On- Premise

In the age of the data era, where data storage is increasing at an exponential rate and access to information is getting easier and faster, data security is a major concern. There are many cases where we can’t prevent people from accessing data, but we can track and investigate suspicious...

Weak Password Vulnerability in PRTG Network Monitor

PRTG Network Monitor is a computer network monitor that can monitor network computers, routers, switches, firewalls, database servers and more. PRTG Network Monitor suffers from a weak password vulnerability, which can be exploited by attackers to log in to the backend and obtain sensitive...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-13938, CVE-2021-30641)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

Connectwise ConnectWise Automate SQL注入漏洞

Connectwise ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise Connectwise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in versions of ConnectWise Automate prior to...

June 15, 2021—KB5003698 (OS Build 18363.1645) Preview

None None...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-29754)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details CVEID: CVE-2021-29754 DESCRIPTION: IBM WebSphere Application...