16289 matches found
Debian DLA-2831-1 : libntlm - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2831 advisory. Stack-based buffer over-reads for crafted NTLM requests were fixed in libntlm, a library that implements Microsoft's NTLM authentication For Debian 9 stretch, this problem...
[SECURITY] [DLA 2831-1] libntlm security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2831-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 28, 2021 https://wiki.debian.org/LTS -...
Cross site scripting
A Cross-Origin Resource Sharing CORS vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a privileged user to access a URL with malicious code to take over said user’s account.This vulnerability is fixed in UniFi Protect applicati...
Exploit for Out-of-bounds Read in Nxp Lpc55S69Jbd100_Firmware
CVE-2021-40154...
Command injection
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable...
Debian DLA-2826-1 : mbedtls - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2826 advisory. Several vulnerabilities were discovered in mbed TLS, a lightweight crypto and SSL/TLS library, which could result in denial of service, information disclosure or...
CVE-2021-44144
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date...
CVE-2021-44144
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date...
Heap overflow
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date...
PYSEC-2021-860
Croatia Control Asterix 2.8.1 pythonv0.7.2 has a heap-based buffer over-read, with additional details to be disclosed at a later date...
CVE-2021-44144
Croatia Control Asterix 2.8.1 has a heap-based buffer over-read, with additional details to be disclosed at a later date...
CVE-2021-44144
CVE-2021-44144 concerns Croatia Control Asterix 2.8.1 , with a reported heap-based buffer over-read. The root cause is a memory-management flaw that allows access to heap memory beyond allocated boundaries. Public documentation in the connected sources confirms the issue and its association with ...
UPchieve: Authentication Bypass - Email Verification code bypass in account registration process.
Hi Team, I was able to bypass Email Verification code in account registration process. Summary : Authentication Bypass is a dangerous vulnerability, which is found in Web-Applications. An Attackers can bypass the control mechanisms which are used by the underlying web application like Email...
CVE-2021-29328
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...
CVE-2021-29328
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...
Buffer overflow
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...
CVE-2021-29328
OpenSource Moddable v10.5.0 contains a buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. The vulnerability is documented across multiple sources (NVD entry CVE-2021-29328, Red Hat, CNVD) with CVSS details: CVSS v3.1 BASE SCORE 7.1 (HIGH) / LOCAL attack vector, LOW a...
CVE-2021-29328
OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c...
CVE-2021-43409 WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting
The “WPO365 | LOGIN” WordPress plugin up to and including version 15.3 by wpo365.com is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data...
