9530 matches found
CVE-2021-24091
Windows Camera Codec Pack Remote Code Execution Vulnerability...
CVE-2021-24091
Windows Camera Codec Pack Remote Code Execution Vulnerability...
Remote code execution
Windows Camera Codec Pack Remote Code Execution Vulnerability...
CVE-2021-24091
Windows Camera Codec Pack Remote Code Execution Vulnerability...
CVE-2021-24091 Windows Camera Codec Pack Remote Code Execution Vulnerability
...
CVE-2021-24091
CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...
Security Bulletin: IBM Cloud Private is vulnerable to a Node.js lodash vulnerability (CVEID: 183560)
Summary IBM Cloud Private is vulnerable to a Node.js lodash vulnerability Vulnerability Details Third Party Entry: 183560 DESCRIPTION: Node.js lodash module denial of service CVSS Base score: 7.5 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/183560 for the current...
Security Bulletin: A Security Vulnerability affects IBM Cloud Private - OpenSSL (CVE-2019-1551)
Summary A Security Vulnerability affects IBM Cloud Private Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. By...
Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC.
Summary Security Bulletin: Security vulnerabilities in Go affect IBM Cloud Pak for Multicloud Management Hybrid GRC. Vulnerability Details CVEID: CVE-2020-28366 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by a code injection flaw in go...
LogonExpert 8.1 - (LogonExpertSvc) Unquoted Service Path Vulnerability
Exploit Title: LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path Discovery by: Victor Mondragón Vendor Homepage: https://www.softros.com/ Software Links : https://download.logonexpert.com/LogonExpertSetup64.msi Tested Version: 8.1 Vulnerability Type: Unquoted Service Path Tested on: Window...
SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2021:0512-1)
This update for java-171-ibm fixes the following issues : Update to Java 7.1 Service Refresh 4 Fix Pack 80 bsc1182186, bsc1181239, CVE-2020-27221, CVE-2020-14803 - CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8...
CVE-2021-22881
The Host Authorization middleware in Action Pack suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted application...
PT-2021-4590 · Ruby On Rails +3 · Action Pack +3
Name of the Vulnerable Software and Affected Versions: Action Pack versions 2.0.0 and later Action Pack versions prior to 5.2 with the provided patch Action Pack versions prior to 6.0 with the provided patch Action Pack versions prior to 6.1 with the provided patch Description: The issue is relat...
Security Bulletin: IBM Maximo Data Loader (maxloader) shipped with IBM Maximo for Civil Infrastructure is vulnerable to cross-site scripting and missing or insecure "X-XSS-Protection" header
Summary There is missing or insecure "X-XSS-Protection" header in Maximo Data Loader maxloader which is shipped with IBM Maximo for Civil Infrastructure. It may be possible to gather sensitive information about the web application. Vulnerability Details CVEID: CVE-2021-20446 DESCRIPTION: IBM Maxi...
Security Bulletin: IBM Maximo Data Loader (maxloader) shipped with IBM Maximo for Civil Infrastructure is vulnerable to autocomplete HTML Attribute not disabled for password field
Summary There is autocomplete HTML attribute not disabled for password field in Maximo Data Loader maxloader which is shipped with IBM Maximo for Civil Infrastructure. It may be possible to bypass the web application's authentication mechanism. Vulnerability Details CVEID: CVE-2021-20445...
The vulnerability of the WavpackPackSamples function in the packUtils.c component of the WavPack audio codec allows for an operation that outputs data within acceptable buffer limits. This enables a malicious actor to compromise the integrity of the data and cause service failures.
The vulnerability of the WavpackPackSamples function in the packUtils.c component of the WavPack audio codec is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data and also caus...
February 16, 2021-KB4601383 (OS Build 17763.1790) Preview
None None...
The vulnerability of the Camera Codec Pack codecs for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Camera Codec Pack codec set for Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2021-22881
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious...
DEBIAN-CVE-2021-22881
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious...