9547 matches found
CVE-2020-26515
An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie CBLOGIN issued by the application contains the encrypted user's credentials. However, due to a bug in the application code, those credentials are encrypted using a...
Description of the security update for Office 2013: June 8, 2021 (KB5001953)
Description of the security update for Office 2013: June 8, 2021 KB5001953 Summary This security update resolves a Microsoft Office Graphics Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31940 and Microsoft...
Description of the security update for SharePoint Foundation 2013: June 8, 2021 (KB5001962)
Description of the security update for SharePoint Foundation 2013: June 8, 2021 KB5001962 Summary This security update resolves a Microsoft SharePoint remote code execution vulnerability, SharePoint spoofing vulnerability, SharePoint Server remote code execution vulnerability, and SharePoint Serv...
Description of the security update for SharePoint Enterprise Server 2016: June 8, 2021 (KB5001922)
None None...
Description of the security update for Office 2013: June 8, 2021 (KB5001955)
Description of the security update for Office 2013: June 8, 2021 KB5001955 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31939. Note: To apply this...
Description of the security update for Office Web Apps Server 2013: June 8, 2021 (KB5001956)
None None...
Description of the security update for Excel 2013: June 8, 2021 (KB5001963)
Description of the security update for Excel 2013: June 8, 2021 KB5001963 Summary This security update resolves a Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31939. Note: To apply this...
Microsoft Office Excel 代码注入漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2013 Service Pack 1 64-bit editions,Microsoft Office Web Apps Server...
Intel® NUC M15 Laptop Kit Driver Pack Advisory
Summary: Potential security vulnerabilities in some Intel® NUC M15 Laptop Kit Driver Packs may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0056 Description: Insecure inherited permissions fo...
Security Bulletin: WebSphere Application Server ND is vulnerable to Directory Traversal vulnerability (CVE-2021-20517)
Summary WebSphere Application Server ND is vulnerable to a directory traversal vulnerability. This has been addressed. Vulnerability Details CVEID: CVE-2021-20517 DESCRIPTION: IBM WebSphere Application Server Network Deployment could allow a remote authenticated attacker to traverse directories. ...
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
DEBIAN-CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
Design/Logic Flaw
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
UBUNTU-CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack = 2.0.0 when using the redirectto or polymorphicurlhelper with untrusted user input...
CVE-2021-22885
CVE-2021-22885 describes an information disclosure / unintended method execution vulnerability in Rails Action Pack >= 2.0.0 caused by using untrusted input with redirect_to or polymorphic_url. Exploitation could disclose data or trigger unintended redirects/method calls depending on input han...
