IBM QRadar SIEM 信息泄露漏洞

QRadar SIEM is an IBM enterprise security information and event management product that consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. An information disclosure vulnerability exists in IBM QRadar SIEM versions 7.3 a...

Oracle Cloud Infrastructure Storage Gateway 安全漏洞

Oracle Cloud Infrastructure Storage Gateway is an application gateway from Oracle Corporation in the United States. A security vulnerability in Oracle Cloud Infrastructure Storage Gateway Management Console Prior to 1.4 allows a highly privileged attacker accessed over an HTTP network to compromi...

Group Office CRM Cross-Site Scripting Vulnerability (CNVD-2021-29739)

Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A cross-site scripting vulnerability exists in the Contacts page in Group Office CRM version 6.4.196. An attacker can exploit this...

OpenJPEG integer overflow vulnerability (CNVD-2021-30596)

OpenJPEG is an open source JPEG 2000 codec written in C language . An integer overflow vulnerability exists in OpenJPEG version v2.4.0. An attacker can exploit the vulnerability by using the command line option "-ImgDir" on a directory containing 1048576 files to crash the program...

SUSE-SU-2021:1152-1 Security update for spamassassin

This update for spamassassin fixes the following issues: - spamassassin was updated to version 3.4.5 - CVE-2019-12420: memory leak via crafted messages bsc1159133 - CVE-2020-1946: security update bsc1184221...

CVE-2021-1796

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution...

CVE-2021-1780

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack...

CVE-2021-1774

CVE-2021-1774 affects Apple platforms via processing a maliciously crafted image, with potential arbitrary code execution. The issue is addressed in macOS Big Sur 11.2, Catalina 11.2 Security Update 2021-001 Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4, per Apple advisory and NVD...

SSH.COM SSH Tectia Client and Server 安全漏洞

SSH.COM SSH Tectia Client and Server is an application from Finland SSH.COM. It is used for secure file transfer and remote access. A security vulnerability exists in SSH Tectia Client and Server before 6.4.19 that allows escalation of local privileges under non-standard conditions...

Appspace Cross-Site Scripting Vulnerability

Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...

Multiple Intel Server System Product Buffer Error Vulnerabilities

Intel Server System is a server array card from Intel Corporation USA. A buffer error vulnerability exists in multiple Intel Server System products. The vulnerability originates when a network system or product performs an operation on memory without properly validating data boundaries, resulting...

CVE-2021-20075

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd...

CVE-2021-27190

A Stored Cross Site ScriptingXSS Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can ste...

MongoDB Ops Manager Security Vulnerability

MongoDB Ops Manager is a solution from MongoDB USA that supports managing, monitoring and backing up MongoDB deployments. A security vulnerability exists in MongoDB Ops Manager that stems from an error triggered by upgrading to MongoDB Ops Manager 4.4.X with SSL turned on in MongoDB...

PT-2021-16809 · Cosmos +1 · Cosmos Network Ethermint +1

Name of the Vulnerable Software and Affected Versions: Cosmos Network Ethermint versions = v0.4.0 Description: The issue is related to a transaction replay vulnerability in the EVM module. If a victim sends a very large nonce transaction, an attacker can replay the transaction through the...

Apple Phone Keypad Security Flaw

The Apple Phone Keypad is an American Apple component used in mobile devices to support the phone's keypad functionality. A security vulnerability exists in Apple Phone Keypad, which originates from the lock screen allowing access to contacts on a locked device. The following products and models...

USN-4715-2 python-django vulnerability

USN-4715-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files outside of their...

MISP cross-site scripting vulnerability (CNVD-2021-07507)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.128. The vulnerability ste...

IBM QRadar SIEM 路径遍历漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A directory...

SUSE-SU-2021:0200-1 Security update for hawk2

This update for hawk2 fixes the following issues: hawk2 was updated to version 2.4.0+git.1611141202.2fe6369e. Security issue fixed: - Fixed another possible code execution vulnerability in the controller code bsc1179998...