9521 matches found
DEBIAN-CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
Open redirect
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
UBUNTU-CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
CVE-2021-22942
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack = 6.0.0 that could allow attackers to redirect users to a malicious website...
CVE-2021-22942
CVE-2021-22942 describes an open redirect in Ruby on Rails Action Pack’s Host Authorization middleware (versions ≥ 6.0.0). Affected: Rails Action Pack/OpenRedirect via Host Authorization where specially crafted X-Forwarded-Host headers with certain allowed-host formats (e.g., leading dot in confi...
Speed Booster Pack < 4.3.3.1 - Admin+ SQL Injection
The plugin does not escape the sbpconverttablename parameter before using it in a SQL statement to convert the related table, leading to an SQL injection https://example.com/wp-admin/admin-ajax.php?action=sbpdatabaseaction&sbpaction=converttables&sbpconverttablename=SQLi&nonce=b2d6208254 The nonc...
Speed Booster Pack < 4.3.3.1 - Admin+ SQL Injection
The plugin does not escape the sbpconverttablename parameter before using it in a SQL statement to convert the related table, leading to an SQL injection PoC https://example.com/wp-admin/admin-ajax.php?action=sbpdatabaseactionaction=converttablesconverttablename=SQLi=b2d6208254 The nonce is...
WordPress Speed Booster Pack plugin <= 4.3.3 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered by Quan, Hoang Xuan in WordPress Speed Booster Pack plugin versions = 4.3.3. Solution Update the WordPress Speed Booster Pack plugin to the latest available version at least 4.3.3.1...
Security Bulletin: Vulnerability in WebSphere Commerce related to persistent sessions and personalization IDs. (CVE-2012-3300)
Question Security Bulletin: Vulnerability in WebSphere Commerce related to persistent sessions and personalization IDs. CVE-2012-3300 | -9F7F4EC1049C904F85257A77006D19A9- | Answer Flash Alert Abstract WebSphere Commerce contains a security vulnerability related to its use of persistent sessions a...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5002043)
This host is missing an important security update according to Microsoft KB5002043 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office Web Apps Server 2013 Service Pack 1 Multiple Vulnerabilities (KB5002036)
This host is missing a critical security update according to Microsoft KB5002036 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Word 2013 Service Pack 1 RCE Vulnerability (KB5001960)
This host is missing a critical security update according to Microsoft KB5001960 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2021-33735
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2 Update 1. A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application...
Description of the security update for Word 2013: October 12, 2021 (KB5001960)
Description of the security update for Word 2013: October 12, 2021 KB5001960 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-40486. Note: To apply this...
Description of the security update for Office Web Apps Server 2013: October 12, 2021 (KB5002036)
None None...
Description of the security update for SharePoint Enterprise Server 2016: October 12, 2021 (KB5002006)
None None...
Description of the security update for Excel 2013: October 12, 2021 (KB5002043)
Description of the security update for Excel 2013: October 12, 2021 KB5002043 Summary This security update resolves a Microsoft Excel information disclosure vulnerability and Microsoft Excel remote code execution vulnerabilities. To learn more about the vulnerabilities, see the following security...