9589 matches found
RSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS
The plugin does not sanitise or escape some of its settings before saving and outputing them in the admin dashboard, leading to an Authenticated Stored Cross-Site Scripting issue even when the unfilteredhtml capability is disallowed. Vulnerable parameters: &ytnetw=, &ytnetwspan=, &ytfeedbacknetw=...
Utilities ‘Concerningly’ at Risk from Active Exploits
The amount of time that utility networks spend exposed to a known application exploit has spiked over the past two months — something analysts called out as a “concerning datapoint,” and an important reminder that ransomware isn’t the only threat utility networks need to secure against. A new...
CVE-2021-21554
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploi...
CVE-2021-21554: Heap-based Buffer Overflow
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploi...
CVE-2021-0106
Incorrect default permissions in the IntelR OptaneTM DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0106
CVE-2021-0106 affects Intel Optane DC Persistent Memory for Windows. The vulnerability stems from incorrect default permissions in software versions before 2.00.00.3842 or 1.00.00.3515, potentially allowing an authenticated user to escalate privileges via local access. Intel’s advisory (Intel SA-...
CVE-2021-0106
Incorrect default permissions in the IntelR OptaneTM DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0106: Incorrect Default Permissions
Incorrect default permissions in the IntelR OptaneTM DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2021-12910
Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM DC Persistent Memory for Windows versions before 2.00.00.3842 IntelR OptaneTM DC Persistent Memory for Windows versions before 1.00.00.3515 Description: The issue is related to incorrect default permissions in the software,...
Intel® Optane™ DC Persistent Memory for Windows June 2021 Security Update
Intel has informed HP of a potential security vulnerability in the Intel® Optane™ DC Persistent Memory for Windows software which may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...
CVE-2021-27828
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...
CVE-2021-27828
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...
CVE-2021-27828
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...
CVE-2021-27828
SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries...
CVE-2020-27832: Improper Neutralization of Input During Web Page Generation
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting XSS vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerabilit...
PT-2021-11423
Name of the Vulnerable Software and Affected Versions: Red Hat Quay affected versions not specified Description: A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting XSS vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a...
Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting (XSS)
Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Gadget Works Online Ordering System 1.0 - (Category) Persistent Cross-Site Scripting Vulnerability
Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/13093/gadget-works-online-ordering-system-phpmysqli.html Version: 1....
Gadget Works Online Ordering System 1.0 Cross Site Scripting
Exploit Title: Gadget Works Online Ordering System 1.0 - 'Category' Persistent Cross-Site Scripting XSS Date: 24-05-2021 Exploit Author: Vinay H C Vendor Homepage: https://www.sourcecodester.com/ Software Link:...